-
AppExpert Applications and Templates
-
Configure application authentication, authorization, and auditing
-
-
Advanced Policy Expressions: Working with Dates, Times, and Numbers
-
Advanced Policy Expressions: Parsing HTTP, TCP, and UDP Data
-
Advanced Policy Expressions: IP and MAC Addresses, Throughput, VLAN IDs
-
-
This content has been machine translated dynamically.
Dieser Inhalt ist eine maschinelle Übersetzung, die dynamisch erstellt wurde. (Haftungsausschluss)
Cet article a été traduit automatiquement de manière dynamique. (Clause de non responsabilité)
Este artículo lo ha traducido una máquina de forma dinámica. (Aviso legal)
此内容已经过机器动态翻译。 放弃
このコンテンツは動的に機械翻訳されています。免責事項
이 콘텐츠는 동적으로 기계 번역되었습니다. 책임 부인
Este texto foi traduzido automaticamente. (Aviso legal)
Questo contenuto è stato tradotto dinamicamente con traduzione automatica.(Esclusione di responsabilità))
This article has been machine translated.
Dieser Artikel wurde maschinell übersetzt. (Haftungsausschluss)
Ce article a été traduit automatiquement. (Clause de non responsabilité)
Este artículo ha sido traducido automáticamente. (Aviso legal)
この記事は機械翻訳されています.免責事項
이 기사는 기계 번역되었습니다.책임 부인
Este artigo foi traduzido automaticamente.(Aviso legal)
这篇文章已经过机器翻译.放弃
Questo articolo è stato tradotto automaticamente.(Esclusione di responsabilità))
Translation failed!
Configuring a data set
To configure a data set, you must specify the strings that server as a pattern, assign a type (number, IPv4 address, or IPv6 address) and configure the dataset range. You can manually assign a unique index value to the pattern, or you can allow the index values to be assigned automatically. Dataset is not related to HTTP or any 7 layer protocol. It works only on text or string. There are different types of dataset such as NUM, ULONG, IPv4, IPv6, MAC, DOUBLE. You can select a type and define the dataset range based on the specified type.
Note:
Policy data sets are case sensitive (unless you specify the expression to ignore case). Therefore, the MAC address ff:ff:ff:ff:ff:ff for example, is not the same as the MAC address FF:FF:FF:FF:FF:FF.
The rules applied for index values of data sets are similar to pattern sets. For information about index values, see Configuring a Pattern Set.
To configure a data set
You must complete the following steps to configure a data set:
- Add a policy dataset
- Bind pattern to a policy dataset
- Add a policy expression
- Verify the policy configuration
Add a policy dataset
At the command prompt, do the following:
add policy dataset <name> <type>
Example:
add policy dataset ds1 ipv4 -comment numbers
Bind a pattern to the data set
At the command prompt, type:
bind policy dataset <name> <value> [-index <positive_integer>] [-endRange <string>] [-comment <string>]
Example:
bind policy dataset ds1 1.1.1.1 -endRange 1.1.1.10 -comment short description about the pattern bound to the data set
Note:
You must repeat this step for all the patterns you want to bind to the data set. You can bind only up to 5000 patterns to a dataset.
And, a dataset range must not overlap with other ranges bound to a dataset and cannot include single values bound to the dataset. If you bind a dataset with an overlapping range results in an error.
Example:
add policy dataset ip_set ipv4
Done
bind policy dataset ip_set 2.2.2.25
Done
bind policy dataset ip_set 2.2.2.20 -endRange 2.2.2.30
ERROR: The range overlaps an existing range or includes a value bound to the dataset.
<!--NeedCopy-->
A value is considered to be in the dataset if it is either equal to a single value bound to the data set or is between the lower-value and upper-value (lower-value <= value && value <- upper-value), for a range bound to the data set.
Use policy expression in a policy data set
At the command prompt, type:
add policy expression exp1 http.req.body(100).contains_any("ds1")
Where, The expression checks whether there is any pattern (or pattern within the range) bound to the dataset ds1 is present in the first 100 bytes of the HTTP request body.
Verify dataset configuration
At the command prompt, type:
show policy dataset ds1
> show policy dataset ds1
Example:
Dataset: ds1
Type: IPV4
1) Bound Dataset Range from: 1.1.1.1 through: 1.1.1.10 Index: 1
<!--NeedCopy-->
To configure a data set by using the configuration utility
Follow the steps given below to configure a policy dataset:
- Navigate to AppExpert > Data Sets.
- In the details pane, under Data Sets, click Add.
-
In the Configure Data Set page, set the following parameters.
- Name. Name of the policy data set.
- Type. Type of value to bind to the dataset.
- Click Insert to bind the dataset value of specific type.
- Value. Value of the specified type associated with the dataset.
- Index. The index value of the dataset.
- End range. The dataset entry. This is a range
<value>
to<end_range>
. - Comments. A short description about the data set.
- Click Insert and Close.
- Enter comments.
- Click Create and Close.
Share
Share
This Preview product documentation is Cloud Software Group Confidential.
You agree to hold this documentation confidential pursuant to the terms of your Cloud Software Group Beta/Tech Preview Agreement.
The development, release and timing of any features or functionality described in the Preview documentation remains at our sole discretion and are subject to change without notice or consultation.
The documentation is for informational purposes only and is not a commitment, promise or legal obligation to deliver any material, code or functionality and should not be relied upon in making Cloud Software Group product purchase decisions.
If you do not agree, select I DO NOT AGREE to exit.