Disable WAF HTTP trace & track

Question

Hi, 
 I need to disable the HTTP TRACE & TRACK methods on the WAF on XG18 MR5 
 I have tried the KBs below and they do not apply, I guess they are too old 
 https://support.sophos.com/support/s/article/KB-000038557?language=en_US 
 https://support.sophos.com/support/s/article/KB-000039071?language=en_US 
 
 I have raised a Support Ticket but I'm thinking I may get a quicker response here. 
 Thanks, 
 Craig

FormerMember · Accepted Answer

Hi CraigLloyd , 
 Thanks for reaching out to the Community! 
 I just verified the steps outlined in the following KBA on my LAB firewall running on v18 MR5, and it works. 
 
 Sophos XG Firewall: How to disable HTTP trace option for WAF/Web Server . 
 
 Reference: 
 SFVUNL_AZ01_SFOS 18.0.5 MR-5# psql -U nobody -d corporate -c "update tblwafadvanceconfig set trace_enabled=0" UPDATE 1 SFVUNL_AZ01_SFOS 18.0.5 MR-5# opcode waf_reconfig -t json -b '{"Entity": "waf_advanced_config", "Event": "UPDATE"}' -ds nosync 200 OK { "status": "200", "statusmessage": "success" } SFVUNL_AZ01_SFOS 18.0.5 MR-5# cat /cfs/waf/reverseproxy.conf | head -n 3 | tail -n 1 TraceEnable Off SFVUNL_AZ01_SFOS 18.0.5 MR-5# 
 PS: What is the firewall model number, and are you getting any error messages when you run the commands? I verified these commands on a virtual firewall running in Azure. 
 Thanks,

CraigLloyd · Answer

Hi H_Patel, 
 Many thanks for the reply. I tried again with the commands above and it seems that it worked this time. 
 Although I got a little confused with the last command, the "TraceEnable Off" appeared to be part of the command, once I took this off it worked. 
 Many Thanks, 
 Craig

Disable WAF HTTP trace & track

Top Replies