Using IPS to block HTTP POST, PUT and DELETE requests

[#1]

Article

Description	Using IPS custom signatures to block HTTP POST, PUT and DELETE requests.
Components	All FortiGate units runing FortiOS v3.0.
Steps or Commands	You can use the following custom signatures to detect and stop HTTP POST, PUT and DELETE requests. These requests are common methods used on the Internet, especially POST. These requests do not indicate attacks by themselves. F-SBID( --name "Block.HTTP.POST"; --protocol tcp; --service HTTP; --flow from_client; --pattern "POST "; --context uri; --within 5,context; ) F-SBID( --name "Block.HTTP.PUT"; --protocol tcp; --service HTTP; --flow from_client; --pattern "PUT "; --context uri; --within 4,context; ) F-SBID( --name "Block.HTTP.DELETE"; --protocol tcp; --service HTTP; --flow from_client; --pattern "DELETE "; --context uri; --within 7,context; )