VMware Workspace ONE Community
AmaurySOBACOAma
Enthusiast
Enthusiast

Curl command on DS shows Console URL

Hi all,

Some security audits shows that when we ' curl'  our DeviceServices URL,

Result shows our LAN Console URL. who is possibly a security breach ...

Anyone knows how to hide the Console URL on curl result ?
Labels (1)
0 Kudos
3 Replies
billiamc
Contributor
Contributor

It's the automatic redirection that detects the device type you're coming from and then redirects accordingly. As it either doesn't know what it is or thinks it's somebody wanting the console it redirects to whatever the console URL is configured as.

I think there are at least 2 options. Remove the redirect site option when installing the DS or edit the file which performs the redirect (C: or AirWatch or Default Website or Default.aspx).
0 Kudos
AmaurySOBACOAma
Enthusiast
Enthusiast

Hi,

thanks, just add ' #'  before  ' string redirect_console ='  line on (C: or AirWatch or Default Website or Default.aspx) File,

and now, error 404 on curl Command, instead of Internal URL. Top !

Thanks
0 Kudos
LukeDC
Expert
Expert

Also remember after any upgrade you will have to make this change again.
0 Kudos