Citrix Systems Network Router 9 2 Users Manual Policy

2015-02-05

• Contents
• Preface
  • About This Guide
  • New in This Release
  • Audience
  • Formatting Conventions
  • Related Documentation
  • Getting Service and Support
  • Documentation Feedback
• Introduction to Policies and Expressions
  • Advanced and Classic Policies
    • Benefits of Using Advanced Policies
    • Basic Components of an Advanced or a Classic Policy
    • How Different NetScaler Features Use Policies
    • About Actions and Profiles
      • About Actions
      • About Profiles
      • Use of Actions and Profiles in Particular Features
    • About Policy Bindings
    • About Evaluation Order of Policies
    • Order of Evaluation Based on Traffic Flow
  • Advanced and Classic Expressions
    • About Advanced Expressions
    • About Classic Expressions
  • About Migration from Classic to Advanced Policies and Expressions
  • Before You Proceed
• Configuring Advanced Policies
  • Creating or Modifying an Advanced Policy
    • Policy Configuration Examples
  • Binding Advanced Policies
    • Feature-Specific Differences in Policy Bindings
    • Bind Points and Order of Evaluation
    • Advanced Policy Evaluation Across Features
    • Entries in a Policy Bank
    • Evaluation Order Within a Policy Bank
    • How Policy Evaluation Ends
    • How Features Use Actions After Policy Evaluation
    • Binding a Policy Globally
    • Binding a Policy to a Virtual Server
    • Displaying Policy Bindings
  • Unbinding an Advanced Policy
  • Creating Policy Labels
    • Creating a Policy Label
    • Binding a Policy to a Policy Label
  • Configuring a Policy Label or Virtual Server Policy Bank
    • Configuring a Policy Label
    • Configuring a Policy Bank for a Virtual Server
  • Invoking or Removing a Policy Label or Virtual Server Policy Bank
  • Configuring and Binding Policies with the Policy Manager
• Configuring Advanced Expressions: Getting Started
  • Expression Characteristics
  • Basic Elements of an Advanced Expression
    • Prefixes
    • Single-Element Expressions
    • Operations
    • Basic Operations on Expression Prefixes
  • Compound Advanced Expressions
    • Booleans in Compound Expressions
    • Parentheses in Compound Expressions
    • Compound Operations for Strings
    • Compound Operations for Numbers
  • Classic Expressions in Advanced Expressions
  • Configuring Advanced Expressions in a Policy
  • Configuring Named Advanced Expressions
  • Configuring Advanced Expressions Outside the Context of a Policy
• Advanced Expressions: Evaluating Text
  • About Text Expressions
    • About Operations on Text
    • Compounding and Precedence in Text Expressions
    • Categories of Text Expressions
    • Guidelines for Text Expressions
  • Expression Prefixes for Text
    • Expression Prefixes for Text in HTTP Requests and Responses
    • Expression Prefixes for VPNs and Clientless VPNs
  • Operations on Text
    • Basic Operations on Text
    • Operations for Calculating the Length of a String
    • Operations for Controlling Case Sensitivity
  • Complex Operations on Text
    • Operations on the Length of a String
    • Operations on a Portion of a String
    • Operations for Comparing the Alphanumeric Order of Two Strings
    • Extracting the nth Integer from a String of Bytes that Represent Text
    • Converting Text to a Hash Value
    • Encoding and Decoding Text by Applying the Base64 Encoding Algorithm
    • Refining the Search in a Rewrite Action by Using the EXTEND Operator
    • Converting Text to Hexadecimal Format
• Advanced Expressions: Working with Dates, Times, and Numbers
  • Format of Dates and Times in an Expression
  • Dates and Times in a Rewrite Action
  • Expressions for the NetScaler System Time
  • Expressions for SSL Certificate Dates
  • Expressions for HTTP Request and Response Dates
  • Expression Prefixes for Numeric Data Other Than Date and Time
• Advanced Expressions: Parsing HTTP, TCP, and UDP Data
  • About Evaluating HTTP and TCP Payload
    • About Evaluating the Payload Body
  • Expressions for HTTP Headers
    • Prefixes for HTTP Headers
    • Operations for HTTP Headers
    • Prefixes for Cache-Control Headers
    • Operations for Cache-Control Headers
  • Expressions for Extracting Segments of URLs
  • Expressions for Numeric HTTP Payload Data Other Than Dates
  • Operations for HTTP, HTML, and XML Encoding and “Safe” Characters
  • Expressions for TCP, UDP, and VLAN Data
  • XPath and JSON Expressions
• Advanced Expressions: Parsing SSL Certificates
  • About SSL and Certificate Expressions
  • Prefixes for Text-Based SSL and Certificate Data
  • Prefixes for Numeric Data in SSL Certificates
  • Expressions for SSL Certificates
• Advanced Expressions: IP and MAC Addresses, Throughput, VLAN IDs
  • Expressions for IP Addresses and IP Subnets
    • Prefixes for IPV4 Addresses and IP Subnets
    • Operations for IPV4 Addresses
    • About IPv6 Expressions
    • Expression Prefixes for IPv6 Addresses
    • Operations for IPV6 Prefixes
  • Expressions for MAC Addresses
    • Prefixes for MAC Addresses
    • Operations for MAC Addresses
  • Expressions for Numeric Client and Server Data
• Advanced Expressions: String Sets, String Patterns, and Data Formats
  • Matching Text With Strings in a Set
    • Operators That Use a Pattern Set
    • Configuring a Pattern Set
  • Matching Text With a Pattern
    • Basic Characteristics of Regular Expressions
    • Operations for Regular Expressions
  • Transforming Text and Numbers into Different Data Types
• Advanced Policies: Controlling the Rate of Traffic
  • About Policies that Monitor the Traffic Rate
  • Expressions for Controlling the Traffic Rate
  • Configuring Policies That Control the Traffic Rate
• Advanced Policies: Sending HTTP Service Callouts to Applications
  • About Calling Out to an External Application
  • About HTTP Callout Policies
    • Note on the Format of an HTTP Request
    • Note on the Format of an HTTP Response
  • Configuring an HTTP Callout Policy
  • Invoking an HTTP Callout Policy
    • Notes on Invoking a Callout
• Configuring Classic Policies and Expressions
  • Where Classic Policies Are Used
  • Viewing Classic Policies
  • Configuring a Classic Policy
    • Configuring a Classic Expression
  • Binding a Classic Policy
  • Creating Named Classic Expressions
• Expressions Reference
  • Advanced Expressions
  • Classic Expressions
    • Operators
    • General Expressions
    • Client Security Expressions
    • Network-Based Expressions
    • Date/Time Expressions
    • File System Expressions
    • Built-In Named Expressions (General)
    • Built-In Named Expressions (Anti-Virus)
    • Built-In Named Expressions (Personal Firewall)
    • Built-In Named Expressions (Client Security)
• Summary Examples of Advanced Expressions and Policies
• Tutorial Examples of Advanced Policies for Rewrite
  • Redirecting an External URL to an Internal URL
  • Redirecting a Query
  • Redirecting HTTP to HTTPS
  • Removing Unwanted Headers
  • Reducing Web Server Redirects
  • Masking the Server Header
• Tutorial Examples of Classic Policies
  • Access Gateway Policy to Check for a Valid Client Certificate
  • Application Firewall Policy to Protect a Shopping Cart Application
  • Application Firewall Policy to Protect Scripted Web Pages
  • DNS Policy to Drop Packets from Specific IPs
  • SSL Policy to Require Valid Client Certificates
• Migration of Apache mod_rewrite Rules to Advanced Policies
  • Converting URL Variations into Canonical URLs
  • Converting Host Name Variations to Canonical Host Names
  • Moving a Document Root
  • Moving Home Directories to a New Web Server
  • Working with Structured Home Directories
  • Redirecting Invalid URLs to Other Web Servers
  • Rewriting a URL Based on Time
  • Redirecting to a New File Name (Invisible to the User)
  • Redirecting to New File Name (User-Visible URL)
  • Accommodating Browser Dependent Content
  • Blocking Access by Robots
  • Blocking Access to Inline Images
  • Creating Extensionless Links
  • Redirecting a Working URI to a New Format
  • Ensuring That a Secure Server Is Used for Selected Pages
• New Advanced Expression Operators in This Release
  • Operators for Extracting and Evaluating Numeric Data
  • Operators for Extracting and Evaluating Text
  • Operators for Extracting and Evaluating HTTP Data
  • Operators for the CLIENT and ipv6 Expression Prefixes
  • XPath and JSON Operators for Evaluating XML and JSON Data
  • Operators for Evaluating Groups to Which a User Belongs
• Index