Aastra Telecom 9480i Series - Manual (Page 808)

Operational, Basic, and Advanced Parameters
A-34 41-001160-03, Rev 00, Release 2.4
IP Phone Administrator Guide
Parameter –
https block http post xml
HTTPS Server - Block XML
HTTP POSTs
(in Web UI)
IP Phone UI Options->Administrator Menu->
Network Settings->HTTPS->
HTTPS Server->XML
Aastra Web UI Advanced Settings->Network->
Advanced Network Settings
Configuration Files aastra.cfg, <mac>.cfg
Description Enables or disables the blocking of XML scripts from HTTP POSTs.
Some client applications use HTTP POSTs to transfer XML scripts. The
phones’s HTTP server accepts these POSTs even if server redirection is
enabled, effectively bypassing the secure connection. When this
parameter is enabled (blocking is enabled), receipt of an HTTP POST
containing an XML parameter header results in the following response:
“403 Forbidden”. This forces the client to direct the POSTs to the HTTPS
server through use of the “https://” URL.
Format Boolean
Default Value 0 (disables blocking of XML HTTP POSTs)
Range 0 (disables blocking of XML HTTP POSTs)
1 (enables blocking of XML HTTP POSTs)
Example https block http post xml: 1
Draft 1