topic Re: Disabling HTTP OPTIONS and DELETE methods in SmartZone and Virtual SmartZone

Disabling HTTP OPTIONS and DELETE methods

publicwifi — Tue, 01 Aug 2023 19:45:37 GMT

Hello All!

I've started scanning some of our Ruck servers with Rapid7 and it's showing HTTP OPTIONS and DELETE methods as active vulnerabilities. I can deal with these in IIS, nginx, or Apache, but I have no idea how to approach this within Ruckus' software. We're on version 6.1.0.0.935 and will be upgrading soon. Any advice would be greatly appreciated. Thanks!

Re: Disabling HTTP OPTIONS and DELETE methods

sanjay_kumar — Wed, 02 Aug 2023 02:17:06 GMT

Hi @publicwifi
6.1.0.0.935 is the vSZ version, you mean you are going to upgrade from 6.1.0.0.935 to Unleashed version?
If yes, I would recommend you to open a support case and provide the complete report of the scanning report so that we can review and provide the solution to fix the issue.

Re: Disabling HTTP OPTIONS and DELETE methods

publicwifi — Wed, 02 Aug 2023 14:10:00 GMT

Sanjay,

Thanks for the speedy response! We will do that.