how does 'match req-response mismatch'

[Terry Lee]

Hi, Im studying HTTP MPF atm,

Im just wondering about the command/feature of HTTP MPF 'match req-reponse mismatch'

I have few question,

what is req-response mismatch ?

how does it work?? (as in specific packet flow,)

can you give me an example, or any specific case ???

thank you !!

[mirober2]

Hi Terry,

The command reference shold have what you're looking for:

http://www.cisco.com/en/US/docs/security/asa/asa84/command/reference/m.html#wp2118086

This command enables the following checks:
•Verifies that the value of the header content-type is in the internal list of supported content types,
•Verifies that the header content-type matches the actual content in the data or entity body portion of the message.
•Verifies the content type field in the HTTP response matches the accept field in the corresponding HTTP request message.
If the message fails any of the above checks, the ASA takes the configured action. 

-Mike