Aastra Telecom SISIP 57I CT - Manual (Page 363)

Operational, Basic, and Advanced Parameters
41-001160-00, Rev 01 Release 2.0 A-21
Configuration Parameters
Appendix A
Parameter –
https block http post xml
HTTPS Server - Block XML
HTTP POSTs
(in Web UI)
IP Phone UI Options->Network Settings->HTTPS->
HTTPS Server->XML
Aastra Web UI Advanced Settings->Network->
Advanced Network Settings
Configuration Files aastra.cfg, .cfg
Description Enables or disables the blocking of XML scripts from HTTP POSTs.
Some client applications use HTTP POSTs to transfer XML scripts. The
phones’s HTTP server accepts these POSTs even if server redirection is
enabled, effectively bypassing the secure connection. When this
parameter is enabled (blocking is enabled), receiption of an HTTP POST
containing an XML parameter header results in the following response:
“403 Forbidden”. This forces the client to direct the POSTs to the HTTPS
server through use of the “https://” URL.
Format Boolean
Default Value 0 (disables blocking of XML HTTP POSTs)
Range 0 (disables blocking of XML HTTP POSTs)
1 (enables blocking of XML HTTP POSTs)
Example https block http post xml: 1