Access Point Issues Form

The DSPANZ Peppol Committee runs this Google Form for Australian and New Zealand Peppol eInvoicing Access Point providers to raise issues and how they have been resolved for the benefit of the A-NZ Peppol community.

Submissions from the Google Form are summarised and shared below for your benefit.

Some Access Points (APs) have a front-end web application firewall (WAF) rule that expects a HTTP User-Agent header to be set. While this makes sense for browsers, it doesn't make sense in a machine world given that User-Agent is not required by Peppol standards (it is optional in RFC 7231 and RFC 2616) and it is an unreliable field.

Proposed solution:
Adding a HTTP User-Agent field for all outgoing AS4 and SMP requests. If an AP gets an AS4/SMP 403 Forbidden error, use CURL to check if it's the User-Agent field causing the error.
With User-Agent: $ curl-Ssc <http>.
No User-Agent: $ curl-Ssc <http>-H 'User-Agent:'

Access Point Issues Form

Online Forum

Member Directory