http post request on Sangfor IAM

Hi,

I know Sangfor IAM only works with HTTP GET Request. May I know anyone know how to configure the Sangfor IAM work with HTTP POST Request?

In control for file uploading and other uploading, the IAM filters behaviors of uploading files through
HTTP POST or other contents based on URL groups. HTTPS permission control is about filtering websites visited through HTTPS. Like permission control
for website browse, HTTPS permission control is also performed based on URL groups defined on the
page displayed after you choose Objects > URL Database

You can see on the other tab in the configuration to set the HTTP Post.

If you want to configure Http Post, there is another tab for that like the Get

Please elaborate more on your problem.

Step 1. Check [HTTP URL Filter] on the left pane to open the [HTTP URL Filter] page on the right. TheHTTP URL filter references the settings defined on the [URL Library] and [Schedule]

Step 2. Click  and then click the icon to open the [URL Category] page, (please see annex 1)

Step 3. Specify the target URL category. You can select [All], [Selected] or [Unselected] from the [Filter]drop-down list to display all, selected or unselected URL groups. The left pane displays the URLgroups available, with a check box in front of each item. Check the box to select thecorresponding URL group or type the keyword in the text box behind [Filter] to quickly find yourdesired URL group. In this example, type bank in the text box and press Enter on your keyboardor click the icon. The search will start and corresponding URL groups will be displayed.Then check all the relevant URL groups, and your selections will be displayed under [SelectedList] on the right. Finally, click  to save your settings. (please see annex 2)

Step 4. Set [Action] to Deny and [Schedule] to Office Hours, and click  to save the HTTP URL filter rule. (please see annex 3)

Step 5. To allow access to forum but deny posting onto it during office hours, click the [Post Filter] taband click  to add a post filter rule. The post filter references the settings defined on the[Objects] > [URL Library] page (please see annex 4).

Step 6. Click the icon to open the [URL Category] page. (please see annex 5)

Step 7. Specify the target URL groups. Type forum in the text box and press Enter on your keyboard orclick the icon. The search will start and corresponding URL groups will be displayed. Thencheck all the relevant URL groups, and your selections will be displayed under [Selected List] onthe right. Finally, click  to save your settings. (please see annex 6)

Step 8. Set [Action] to Only allow login POST and [Schedule] to Office Hours, and then click  to save the POST filter rule (please see annex 7)

Step 9. Modify the [Web Browsing Filter] and [Post Filter] rules.

To manage the Web browsing filter rule, check the rule entry and then click  todelete it, click / to change the action to [Deny]/[Allow], or click/ to move this entry up/down to adjust the display order. Since the rules arematched from top to bottom, the rule entry displayed at the top will be preferentiallymatched. If you find some URLs uncategorized in the current URL library, click the [ReportUncategorized URL] link to send the uncategorized URLs to SANGFOR engineers byemail to improve the current URL library.

To manage the post filter rule, check the rule entry and then click  to delete it, click/ to change the action to [Deny]/[Allow], or click / to movethis entry up/down to adjust the display order. Since the rules are matched from top tobottom, the rule entry displayed at the top will be preferentially matched.

Step 10. Click  to complete the policy setting. If you want to set other functions, continue toselect the function and further set the policy.

Sangfor IAM controls the file uploading through HTTP POST.

In control for file uploading and other uploading, the IAM filters behaviors of uploading files through
HTTP POST or other contents based on URL groups.

HTTPS permission control is about filtering websites visited through HTTPS. Like permission control
for website browse, HTTPS permission control is also performed based on URL groups defined on the
page displayed after you choose Objects > URL Database. They differ in the URL detection mode.
When a user visits a security website through HTTPS, data is encrypted and the IAM cannot detect
the URL. Generally, the URL of a security website is the same as the address specified in Issued To of
an SSL certificate. Therefore, the IAM can detect this value in the SSL certificate to obtain the URL of
the visited security website. To define the URL of an HTTPS website, set the URL based on the value
of Issued To in the certificate issued by the website.

[Post Filter] controls the HTTP Post
Allow: To allow users to post when they are visiting the specified URLs.
Deny: To block users from posting when they are visiting the specified URLs.
Only allow login POST: To only allow the login POST and block other POST behaviors when
users are visiting specified URLs.

Kindly explain more

Hi, we appreciate if you can explain more on your requirement thank you.