WSM User Guide - WatchGuard Technologies

Configuring the HTTP Proxyfirst line of the deny message is a component of the HTTP header. There must be an empty line betweenthe first line and the body of the message.1 From the Categories section, select Deny Message.2 Type the deny message in the deny message box. You can use these variables:%(transaction)%Puts “Request” or “Response” to show which side of the transaction caused the packet to bedenied.%(reason)%Puts the reason the Firebox denied the content.%(method)%Puts the request method from the denied request.%(url-host)%Puts the server host name from the denied URL. If no host name was included, the IP address ofthe server is given.%(url-path)%Puts the path component of the denied URL.Enabling intrusion prevention for HTTPAlthough you can use the proxy definition screens to activate and configure IPS, it is easier to use theTasks menu in Policy Manager to do this. For more information on how to do this, or to use the IPSscreens in the proxy definition, see the chapter “Using Signature-Based Security Services.”Defining proxy and antivirus alarms for HTTPUse these settings to set criteria for a notification event:1 From the Categories section, select Proxy and AV Alarms.2 Do the steps in “Using dialog boxes for alarms, log messages, and notification” on page 164.User Guide 179