R3166-R3206-HP High-End Firewalls Attack Protection Configuration Guide-6PW101

61
Analysis
A URL address filtering entry can contain only 0 to 9, a to z, A to Z, dot “.”, hyphen “-“, underline “_”, and
wildcards “^”, “$”, “&”, and “*”. A URL parameter filtering entry can contain only 0 to 9, a to z, A to Z,
wildcards “^”, “$”, “&”, and “*”, and other ASCII characters with values between 31 and 127.
Solution
Ensure that all entered characters are valid.
Invalid use of wildcards
Symptom
When you configure a URL address filtering entry or URL parameter filtering entry, the system prompts
you that the wildcards are not used correctly.
Analysis
The wildcards for URL address filtering entries and those for URL parameter filtering entries have different
usage restrictions:
Table 33 Wildcards for URL address filtering entries
Wildcard Meanin
g
Usa
g
e
g
uidelines
^
Matches website addresses
starting with the keyword
It can be present once at the beginning of a filtering entry.
$
Matches website addresses
ending with the keyword
It can be present once at the end of a filtering entry.
&
Stands for a valid character other
than dot “.”
It can be present multiple times at any position of a filtering
entry, consecutively or inconsecutively, but cannot be used
together with “*”.
*
Stands for any number of valid
characters and spaces excluding
dot “.”
It can be present once at the beginning or in the middle of
a filtering entry. It cannot be at the end and cannot be
used next to “^” or “$”.
Table 34 Wildcards for URL parameter filtering entries
Wildcard Meanin
g
Usa
g
e
g
uidelines
^
Matches parameters starting with
the keyword
Can be present once at the beginning of a filtering entry.
$
Matches parameters ending with
the keyword
It can be present once at the end of a filtering entry.
& Stands for one valid character
It can be present multiple times at any position of a filtering
entry, consecutively or inconsecutively, and cannot be
used next to “*”. If it is present at the beginning or end of
a filtering entry, it must be next to “^” or “$”.
*
Stands for up to 4 valid characters
including spaces
It can be present once in the middle of a filtering entry.
Solution
Use the wildcards correctly according to the above principles.