How to Configure a frame-ancestors response header with a list specifying (Global Protect portal)

Alpalo — Thu, 19 Oct 2023 10:13:18 GMT

Hello
I am reviewing that GlobalProtect (vpn.xxxxxx.com and remote.xxxxxx.com) are vulnerable as they do not have a frame-ancestors response header configured.

I want to configure a frame-ancestors response header with a list specifying which URLs can embed site elements; or use the 'none' keyword to deny any site from embedding site content; or use the 'self' keyword to allow only the site serving the content to embed it.

Can you tell us how to proceed with this configuration?

It is possible?

Regards

Re: How to Configure a frame-ancestors response header with a list specifying (Global Protect portal)

anazarta — Thu, 13 Jun 2024 23:04:06 GMT

This will soon be fixed in the Panos code. The none option will be appended.

topic How to Configure a frame-ancestors response header with a list specifying (Global Protect portal) in GlobalProtect Discussions

How to Configure a frame-ancestors response header with a list specifying (Global Protect portal)

Re: How to Configure a frame-ancestors response header with a list specifying (Global Protect portal)