diff --git a/xCAT-server/xCAT-wsapi/xcat-ws.conf b/xCAT-server/xCAT-wsapi/xcat-ws.conf
index aefeb45b6..64cc7612a 100644
--- a/xCAT-server/xCAT-wsapi/xcat-ws.conf
+++ b/xCAT-server/xCAT-wsapi/xcat-ws.conf
@@ -11,6 +11,10 @@ RewriteCond %{HTTPS} !=on
 RewriteRule ^/?xcatws/(.*) https://%{SERVER_NAME}/xcatws/$1 [R,L]
 RewriteRule ^/?xcatwsv2/(.*) https://%{SERVER_NAME}/xcatwsv2/$1 [R,L]
 </IfModule>
+# Without the redirect, deny the REST aliases.
+<IfModule !mod_rewrite.c>
+RedirectMatch 403 ^/xcatws(v2)?(/|$)
+</IfModule>
 
 <FilesMatch "^(xcatws.cgi|zvmxcatws.cgi)$">
 # Both spellings, so one file serves Apache 2.2 and 2.4.