# Request must contain a kbn-xsrf header

**URL:** https://discuss.elastic.co/t/request-must-contain-a-kbn-xsrf-header/248785
**Category:** Kibana
**Created:** [September 16, 2020, 8:07am UTC](https://discuss.elastic.co/t/request-must-contain-a-kbn-xsrf-header/248785 "2020-09-16T08:07:38Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![todor](https://avatars.discourse-cdn.com/v4/letter/t/f08c70/32.png) [@todor](https://discuss.elastic.co/u/todor)
#### Post date: [September 16, 2020, 8:07am UTC](https://discuss.elastic.co/t/request-must-contain-a-kbn-xsrf-header/248785/1 "2020-09-16T08:07:38Z")

</div>

I've had this issue when i'm trying to open Kibana on [http://localhost:5601/app/home](http://localhost:5601/app/home)

Can some help me?

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/5/6534c38cc0367e60e71b935f3c76854ee27d4796.png)

---

<div class="post-metadata">

### Author: ![dosant](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dosant/32/64489_2.png) [@dosant](https://discuss.elastic.co/u/dosant)
#### Post date: [September 16, 2020, 12:21pm UTC](https://discuss.elastic.co/t/request-must-contain-a-kbn-xsrf-header/248785/2 "2020-09-16T12:21:10Z")

</div>

Hi @todor,

Could you share more info on how you run and configured Kibana?  
Could you also [share failed network requests as HAR](https://developers.google.com/web/tools/chrome-devtools/network/reference#save-as-har)? (please make sure there are no sensitive data first).

---

<div class="post-metadata">

### Author: ![todor](https://avatars.discourse-cdn.com/v4/letter/t/f08c70/32.png) [@todor](https://discuss.elastic.co/u/todor)
#### Post date: [September 16, 2020, 12:52pm UTC](https://discuss.elastic.co/t/request-must-contain-a-kbn-xsrf-header/248785/3 "2020-09-16T12:52:11Z")

</div>

Hi @dosant,

My Kaspersky protection was creating the problem.

When I turn it off, it worked.

Thanks for the reply.

---

<div class="post-metadata">

### Author: ![dosant](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dosant/32/64489_2.png) [@dosant](https://discuss.elastic.co/u/dosant)
#### Post date: [September 16, 2020, 1:56pm UTC](https://discuss.elastic.co/t/request-must-contain-a-kbn-xsrf-header/248785/4 "2020-09-16T13:56:16Z")

</div>


