BenutzerhandbuchInhaltsverzeichnisContents3Preface9About This Guide9New in This Release11Audience11Formatting Conventions12Related Documentation13Getting Service and Support13Documentation Feedback14Introduction to Policies and Expressions15Advanced and Classic Policies15Benefits of Using Advanced Policies16Basic Components of an Advanced or a Classic Policy16How Different NetScaler Features Use Policies17About Actions and Profiles19About Actions19About Profiles19Use of Actions and Profiles in Particular Features20About Policy Bindings21About Evaluation Order of Policies22Order of Evaluation Based on Traffic Flow23Advanced and Classic Expressions23About Advanced Expressions23About Classic Expressions24About Migration from Classic to Advanced Policies and Expressions25Before You Proceed25Configuring Advanced Policies27Creating or Modifying an Advanced Policy28Policy Configuration Examples29Binding Advanced Policies30Feature-Specific Differences in Policy Bindings30Bind Points and Order of Evaluation32Advanced Policy Evaluation Across Features33Entries in a Policy Bank33Evaluation Order Within a Policy Bank34How Policy Evaluation Ends35How Features Use Actions After Policy Evaluation36Binding a Policy Globally36Binding a Policy to a Virtual Server38Displaying Policy Bindings39Unbinding an Advanced Policy39Creating Policy Labels41Creating a Policy Label41Binding a Policy to a Policy Label43Configuring a Policy Label or Virtual Server Policy Bank43Configuring a Policy Label44Configuring a Policy Bank for a Virtual Server46Invoking or Removing a Policy Label or Virtual Server Policy Bank47Configuring and Binding Policies with the Policy Manager49Configuring Advanced Expressions: Getting Started53Expression Characteristics54Basic Elements of an Advanced Expression54Prefixes55Single-Element Expressions57Operations57Basic Operations on Expression Prefixes58Compound Advanced Expressions59Booleans in Compound Expressions60Parentheses in Compound Expressions60Compound Operations for Strings60Compound Operations for Numbers62Classic Expressions in Advanced Expressions71Configuring Advanced Expressions in a Policy71Configuring Named Advanced Expressions74Configuring Advanced Expressions Outside the Context of a Policy75Advanced Expressions: Evaluating Text77About Text Expressions78About Operations on Text78Compounding and Precedence in Text Expressions79Categories of Text Expressions79Guidelines for Text Expressions80Expression Prefixes for Text81Expression Prefixes for Text in HTTP Requests and Responses81Expression Prefixes for VPNs and Clientless VPNs90Operations on Text100Basic Operations on Text100Operations for Calculating the Length of a String101Operations for Controlling Case Sensitivity101Complex Operations on Text102Operations on the Length of a String102Operations on a Portion of a String103Operations for Comparing the Alphanumeric Order of Two Strings104Extracting the nth Integer from a String of Bytes that Represent Text105Converting Text to a Hash Value105Encoding and Decoding Text by Applying the Base64 Encoding Algorithm106Refining the Search in a Rewrite Action by Using the EXTEND Operator106Converting Text to Hexadecimal Format107Advanced Expressions: Working with Dates, Times, and Numbers109Format of Dates and Times in an Expression110Dates and Times in a Rewrite Action111Expressions for the NetScaler System Time111Expressions for SSL Certificate Dates115Expressions for HTTP Request and Response Dates124Expression Prefixes for Numeric Data Other Than Date and Time125Advanced Expressions: Parsing HTTP, TCP, and UDP Data127About Evaluating HTTP and TCP Payload128About Evaluating the Payload Body128Expressions for HTTP Headers129Prefixes for HTTP Headers130Operations for HTTP Headers136Prefixes for Cache-Control Headers140Operations for Cache-Control Headers140Expressions for Extracting Segments of URLs143Expressions for Numeric HTTP Payload Data Other Than Dates144Operations for HTTP, HTML, and XML Encoding and “Safe” Characters145Expressions for TCP, UDP, and VLAN Data148XPath and JSON Expressions150Advanced Expressions: Parsing SSL Certificates155About SSL and Certificate Expressions155Prefixes for Text-Based SSL and Certificate Data156Prefixes for Numeric Data in SSL Certificates157Expressions for SSL Certificates157Advanced Expressions: IP and MAC Addresses, Throughput, VLAN IDs163Expressions for IP Addresses and IP Subnets163Prefixes for IPV4 Addresses and IP Subnets164Operations for IPV4 Addresses164About IPv6 Expressions165Expression Prefixes for IPv6 Addresses166Operations for IPV6 Prefixes167Expressions for MAC Addresses168Prefixes for MAC Addresses168Operations for MAC Addresses168Expressions for Numeric Client and Server Data169Advanced Expressions: String Sets, String Patterns, and Data Formats171Matching Text With Strings in a Set171Operators That Use a Pattern Set172Configuring a Pattern Set174Matching Text With a Pattern178Basic Characteristics of Regular Expressions179Operations for Regular Expressions179Transforming Text and Numbers into Different Data Types183Advanced Policies: Controlling the Rate of Traffic197About Policies that Monitor the Traffic Rate197Expressions for Controlling the Traffic Rate197Configuring Policies That Control the Traffic Rate198Advanced Policies: Sending HTTP Service Callouts to Applications199About Calling Out to an External Application200About HTTP Callout Policies200Note on the Format of an HTTP Request201Note on the Format of an HTTP Response201Configuring an HTTP Callout Policy202Invoking an HTTP Callout Policy207Notes on Invoking a Callout208Configuring Classic Policies and Expressions211Where Classic Policies Are Used211Viewing Classic Policies214Configuring a Classic Policy215Configuring a Classic Expression217Binding a Classic Policy221Creating Named Classic Expressions223Expressions Reference225Advanced Expressions225Classic Expressions238Operators238General Expressions239Client Security Expressions242Network-Based Expressions243Date/Time Expressions244File System Expressions244Built-In Named Expressions (General)246Built-In Named Expressions (Anti-Virus)249Built-In Named Expressions (Personal Firewall)249Built-In Named Expressions (Client Security)250Summary Examples of Advanced Expressions and Policies251Tutorial Examples of Advanced Policies for Rewrite259Redirecting an External URL to an Internal URL259Redirecting a Query261Redirecting HTTP to HTTPS261Removing Unwanted Headers262Reducing Web Server Redirects263Masking the Server Header263Tutorial Examples of Classic Policies265Access Gateway Policy to Check for a Valid Client Certificate265Application Firewall Policy to Protect a Shopping Cart Application266Application Firewall Policy to Protect Scripted Web Pages269DNS Policy to Drop Packets from Specific IPs270SSL Policy to Require Valid Client Certificates271Migration of Apache mod_rewrite Rules to Advanced Policies273Converting URL Variations into Canonical URLs274Converting Host Name Variations to Canonical Host Names274Moving a Document Root275Moving Home Directories to a New Web Server276Working with Structured Home Directories276Redirecting Invalid URLs to Other Web Servers277Rewriting a URL Based on Time278Redirecting to a New File Name (Invisible to the User)279Redirecting to New File Name (User-Visible URL)279Accommodating Browser Dependent Content280Blocking Access by Robots281Blocking Access to Inline Images282Creating Extensionless Links282Redirecting a Working URI to a New Format284Ensuring That a Secure Server Is Used for Selected Pages285New Advanced Expression Operators in This Release287Operators for Extracting and Evaluating Numeric Data287Operators for Extracting and Evaluating Text288Operators for Extracting and Evaluating HTTP Data289Operators for the CLIENT and ipv6 Expression Prefixes289XPath and JSON Operators for Evaluating XML and JSON Data290Operators for Evaluating Groups to Which a User Belongs290Index291Größe: 2,01 MBSeiten: 302Language: EnglishHandbuch öffnen