Instruction manual

Appendix A: Policy Expressions
NetScaler 9000 Series Installation and Configuration Guide - Volume 1 A-5
NSICG60_JAN05
An alternate form of this expression is as follows.
REQ.HTTP.URLQUERY.
z 〈URLLEN: This qualifier specifies the total length of the URL as a whole.
Example:
add policy expression long_url "URLLEN > 250"
An alternate form of this expression is as follows.
add policy expression long_url "REQ.HTTP.URLLEN"
z 〈QUERYLEN: This qualifier specifies the length of the query alone (not
including the path of the URL).
An alternate form of this expression is as follows.
REQ.HTTP.URLQUERYLEN.
z 〈SOURCEIP: This qualifier specifies the client’s IP address (or range with
netmask).
add policy expression cli_ip "SOURCEIP == 192.168.13.68"
An alternate form of this expression is as follows.
add policy expression cli_ip ìREQ.IP.SOURCEIPî
z 〈DESTIP: This qualifier indicates the target IP address, usually the
vserver’s IP address.
add policy expression vpn_ip "DESTIP == 210.18.13.5"
An alternate form of this expression is as follows.
add policy expression vpn_ip " REQ.IP.DESTIP"
z 〈SOURCEPORT: This qualifier specifies the client’s TCP port number (or
range):
add policy expression user_ports "SOURCEPORT ==
1024-65535"
An alternate form of this expression is as follows.
add policy expression user_ports "REQ.TCP.SOURCEPORT"
z 〈DESTPORT: This qualifier specifies the target TCP port
add policy expression vpnport "DESTPORT == 443"
An alternate form of this expression is as follows.