Skip to Content
0
Former Member
Jun 04, 2009 at 10:56 AM

Accessing Web InfoView behind firewall

33 Views

Hi,

Since an intrusion detection feature on our firewall was turned on our end-user are experiencing some issues in infoview:

- alter login and if the initial page is set to home, "Page can't be displayed" is shown in the main area of Infoview, and it is not possible to navigate through folders or most menus and the user can't change the inital page in his preferences.

- for other users navigation and reports work usually well even though some images are found missing.

The error logged on the firewall is an intrusion detection "Encoding Directory Traversal Attack".

I believe the intrusion is detected because infoview passes relative URL path in the query string which containt "../".

Disabling this firewall feature fixes these issues, but it is a requirement for us to keep security tight.

I have had a quick look at the infoview code and it look like a big - and un-supported - change to workaround this problem.

Could advise me on a solution?

Thanks

Guillaume