Header Fields

HEADER FIELDS

Manage Header Fields

[TEMPLATE] > [HEADER FIELDS]

Manages header fields by allowing administrators to directly add necessary fields in addition to the default registered ones. The registered header fields are used in ‘[Policy Settings] > Domain Security Policy > [Header Field]’. For detailed policy configuration methods, refer to the Header Field document.

 

Item	Description
Accept	Specifies the media types and priority acceptable for the response.
Accept-Charset	Specifies the character sets acceptable for the response.
Accept-Encoding	Informs the server of the encoding methods (compression algorithms, etc.) the client can handle.
Accept-Language	Specifies the languages (natural languages) preferred by the client.
Accept-Ranges	Indicates that the server supports range requests for the resource.
Age	Displays the time in seconds the object has been in a proxy cache.
Allow	Lists the HTTP methods supported by the resource (URI).
Authorization	Contains the credentials to authenticate a user agent with a server.
Cache-Control	Specifies directives that must be obeyed by all caching mechanisms along the request/response chain.
Connection	Controls options for the current connection (e.g., keep-alive, close).
Content-Base	Specifies the base URL for resolving relative URLs within the entity.
Content-Encoding	Specifies the encoding method (e.g., compression) applied to the entity.
Content-Language	Describes the natural language(s) of the intended audience for the entity.
Content-Length	Indicates the size of the request or response body in bytes.
Content-Location	Indicates an alternate location for the returned data.
Content-MD5	Contains an MD5 checksum of the entity body to verify message integrity.
Content-Range	Indicates where in the full body the partial message belongs.
Content-Type	Indicates the media type and character encoding of the request or response body.
Date	Represents the date and time at which the message was originated.
ETag	Defines a unique entity tag for identifying a specific version of a resource.
Expect	Indicates that particular server behaviors are required by the client (e.g., 100-continue).
Expires	Gives the date/time after which the response is considered stale.
From	Contains an Internet email address for the human user who controls the requesting user agent.
Host	Specifies the domain name and port number of the server (Required in HTTP/1.1).
If-Match	Used with methods like PUT to only perform the action if the ETag matches.
If-Modified-Since	Allows the server to return the resource only if it has been modified since the specified date.
If-None-Match	Allows the server to return the resource only if the ETag does not match (resource has changed).
If-Range	Used to send the part(s) of the entity if the entity is unchanged; otherwise, sends the new entity.
If-Unmodified-Since	Only perform the action if the entity has not been modified since a specific time.
Last-Modified	Indicates the date and time at which the origin server believes the variant was last modified.
Location	Indicates the URL to redirect a page to, or the URL of a new resource.
Max-Forwards	Limits the number of times the message can be forwarded through proxies or gateways (used with TRACE).
Pragma	Implementation-specific directives that may apply to any recipient along the request/response chain (e.g., no-cache).
Proxy-Authenticate	Defines the authentication method that should be used to access a resource behind a proxy server.
Proxy-Authorization	Contains the credentials to authenticate a user agent to a proxy server.
Public	Lists the HTTP methods supported by the server.
Range	Requests only part of an entity (byte range).
Referer	The address of the previous web page from which a link to the currently requested page was followed.
Retry-After	Indicates how long the user agent should wait before making a follow-up request when the service is unavailable.
Server	Contains information about the software used by the origin server.
Transfer-Encoding	Specifies the form of encoding used to safely transfer the entity to the user (e.g., chunked).
Upgrade	Asks the server to upgrade to a different protocol.
User-Agent	Contains information about the user agent (browser, OS, etc.) originating the request.
Vary	Describes the parts of the request message that influenced the content negotiation.
Via	Added by proxies, both forward and reverse, and can appear in the request headers and the response headers.
WWW-Authenticate	Defines the authentication method that should be used to access a resource.
Warning	General warning information about possible problems not covered by the status code.

ADD HEADER FIELD

[TEMPLATE] > [HEADER FIELDS] > Click [ADD] icon in the upper right

Adds a new header field. Clicking the [ADD] icon in the upper right opens a pop-up window. After entering the necessary information, click [SAVE] to add it to the list. A relevant audit log is created. Registered header fields can be used in the ‘[Policy Settings] > Domain Security Policy > [Header Field Value Policy]’ menu.

Item	Description
Name	Enter the name of the header field.
Type	Select the header area to inspect. REQUEST: Request header sent from client to web server RESPONSE: Response header sent from web server to client
Description	Enter a detailed description for the header field.

EDIT HEADER FIELD

[TEMPLATE] > [HEADER FIELDS] > (Select Header Field) > Click [EDIT] icon in the upper right

Modifies registered header field information. Select the item to modify from the list and click the [EDIT] icon. Enter the information to change and click [SAVE] to complete the modification. A relevant audit log is created.

REMOVE HEADER FIELD

[TEMPLATE] > [HEADER FIELDS] > (Select Header Field) > Click [REMOVE] icon in the upper right

Deletes a registered header field. Select the item to delete from the list and click the [REMOVE] icon. A relevant audit log is created upon completion.