8, looks relatively innocuous, but is actually a launching
point to the advanced HTTP filtering options. The basic tab itself shows to what type
of traffic the rule applies (HTTP or HTTPS) and provides for the option to inform users to
use HTTPS if it is enforced. When using SSL, it also gives the option to require the stronger
128-bit encryption to the traffic, a recommended move in most cases. On some rules, such
as HTTP-only publishing rules or FBA rules, these options will be grayed out, as the default
values will be used instead.
Filtering HTTP Traffic To filter the HTTP traffic, click on the Filtering tab and choose
Configure HTTP, which allows for the following HTTP filtering options:
. Maximum Header Length
. Request Payload Length
391 Publishing and Customizing Web Server Publishing Rules
FIGURE 14.8 Examining the Traffic tab on an ISA web publishing rule.
. Maximum ULR Length
. Maximum Query Length
. Verify Normalization
. Block High Bit Characters
. Block Responses Containing Windows Executable Content
Customizing Allowed Methods In addition to these options, the filter definitions also
enable specific HTTP methods (such as GET and POST) to be allowed in the particular rule.
Pages:
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635