Agent Handler WAF

[davei]

Hi

We have ePO Agent Handler in DMZ.  Security are looking to craft a Web Application Firewall policy to protect the exposed agent handler.  Is anything documented showing the expected profile of traffic from MA to AH?  Such as:

HTTP Version
HTTP Methods
Length - content/url/parameters
Allowed characters

Thanks.

D

[cdinet]

KB66797 lists ports and url requirements, but not sure about your other questions.  KB61057 lists the versions of apache and tomcat that we use.  You can analyze the traffic with wireshark to see what else might answer your questions.