How to deal with Http header not detected error in SMA 1000

After the PCI scan if you are getting error "HTTP header not detected on port 443 " in the vulnerability scan report then this article will help you to resolve the issue.

TIP: Please take backup of your device before making any changes on the appliances. Make sure you are on the latest firmware and hotfixes.

NOTE: This resolution only works on firmware version higher than 12.4.0-02223. If its less or equal to this please upgrade your firmware first.

If you are having issues with vulnerability error "HTTP Security Header Not Detected on port 443"

CAUTION: we cannot block port 443 on SMA as the device needs this port for communication and all users connect to SMA using port 443.

Changing the IP address won't fix the issue, as the HTTP header not being detected is a security or vulnerability issue with the device, not with the IP address. 

By enhancing the security services on the device it can resolve your issue. 
To enable services click Services :- 

Under System Configuration--->Services---->Web Proxy Service---> Advanced 

Enable X-Frame options,XSS Protection, Content Security Policy , Strict Transport Security, MIME Type Sniffing , Cross Domain Policy.

Enabling All will enhance the security of the device and it should pass the PCI vulnerability test.
if after enabling all you still are getting same issue kindly get in touch with us .