- Pulse Secure Community
- :
- About silver78_1
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
01-22-2014
10-30-2017
silver78_1
Occasional Contributor
9
Posts
0
Kudos
1
Solution
02-16-2015
06:53:AM
Hi Alexander, I'm happy that what I've suggested to you it's usefull. About your script, I think that you need to add a "break" statement between the "If...Else" so that the script exits, doesn't check the other cases and forwards the packages faster. Instead of using a "backup host" (your script don't do this) I prefer use a pool with two nodes and tweak the weight inside "Load Balancing" section fo pool configuration. What happens if in "pool.use" don't specify a host, using ""? About "disable", no current connection will be lost, if you don't want to close the active connection you have to use "drain" state. Stefano
... View more
02-09-2015
05:19:AM
Hi Alexander, I solved this problem using an iptables rule like this: iptables -A PREROUTING -d <<IP of your TIG>>/32 -p tcp -m tcp --dport 6400:6420 -j DNAT --to-destination <<IP of your TIG>>:<<Port of your virtual server>> and a traffiscript associated to my Virtual Server with: # Get original request port $OriginalPort = request.getDestPort(); # log.warn( "Original port is: ".$OriginalPort); # Route request to right port on node pool.select( "Pool name", "Node name but is optionally", $OriginalPort); IPtables rule redirects all connection in a range of ports to a single IP:Port (MyVirtualServer) but doesn't change the packet, the rule reads the original destination port from the packet and uses it inside pool.select statement. And it seems to work. Hope this help you. Stefano Edit: in SteelApp 9.8 there's also "Port Mapping Rules" inside "Networking" => "NAT" but I don't try it yet.
... View more
05-14-2014
03:51:AM
Ok, have you tried to check what is returned by "getPath"? You can also try to substitute " $path == "/path1 "" with string.startWithI($path, "/path1") Now I've got to go. Bye Stefano
... View more
05-13-2014
07:50:AM
Hi Michael, I've noticed a white space in your script inside regexsub statement. Is it an error in copy/paste? Stefano
... View more
04-23-2014
02:42:AM
Hi Aidan, we were looking for a way to pass through the cert authentication but there's no way to do that. We already use custom header passing information to our web-app. Thanks for your the response, Regards, Stefano
... View more
02-27-2014
07:53:AM
Hi Ryan, I'm sorry for late response. To check request and response headers you can use Chrome/IE typing F12 before to load your page. This will open a new bar at the bottom of the browser window and inside the "Network" tab it's possible to look inside every item of your page downloaded by the browser. If you click on one of these items (ex.: yourscript.js) you can see detailed infos about the transaction related about it, included Request and Response headers. Bye Stefano
... View more
02-26-2014
12:32:AM
Hi Ryan, sometimes happens (ex.: SharePoint) that webApp send compressed responses (ex.: javascript) that your ResponseRule can't process. Try to add a RequestRule with: http.removeHeader( "Accept-Encoding" ) This prevent node giving compressed responses and permit to your ResponseRule to work on it. You can also try to use "string.replaceAllI" instead of "string.replaceAll" in case of some link isn't write at all in lowercase. Check also response and request header, again sometimes you can found some header pointing to HTTP not to HTTPS. Good luck Stefano
... View more
02-17-2014
02:23:AM
hi all, I've got some problem installing this plug-in because of inside file "site.xml" the key "url" in "feature" node is pointing to the root folder not to folder "features". I've solved reproducing repository structure locally in my pc and modifying "site.xml" pointing key "url" to the "features" folder. Regards Stefano
... View more
01-22-2014
05:04:AM
Hi all, we have a web site reversed on StingRay by a VirtualServer with SSL decryption and pool with SSL encryption, untill now all is easy to deploy. UserBrowser => SSL Decryption => VirtualServer => SSL Encryption => Pool => nodes A new feature of our web site implements user authentication with client certificate and here is the problem: is it possible to forward request of client authentication with certificate from back-end to the real user through StingRay and return the response to the back-end server? Node => ClientCertRequest => Pool => VirtualServer => UserBrowser => ClientCertResponse => VirtualServer => Pool => Node Regards Stefano
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
