The solution found:
portal-ext.properties:
# Include security fixes.
http.header.x-content-type-options.enabled=true
http.header.x-frame-options.enabled=true
http.header.x-frame-options.whitelist.255.url=/
http.header.x-frame-options.whitelist.255.value=SAMEORIGIN
http.header.x-xss-protection.enabled=true
# Uncomment and add properties such as the following to allow hosting UMP
# content in frames and iframes served by other web servers. Use url and
# value pairs numbered from 0 to 254. Browsers must always allow cookies
# to display the UMP content.
# http.header.x-frame-options.whitelist.0.url=/usm/jsp/standalone.jsp
# http.header.x-frame-options.whitelist.0.value=ALLOWALL
address:
\Nimsoft\probes\service\wasp\webapps\ROOT\WEB-INF\classes