- Pulse Secure Community
- :
- About michael.g.zuckerman
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
07-15-2013
10-30-2017
michael.g.zucke
Occasional Contributor
5
Posts
2
Kudos
1
Solution
11-12-2013
03:55:PM
1 Kudo
Sean, Using the following as a response rule on the virtual server adds the "HttpOnly" flag to a new cookie. Hopefully someone else can provide a way to append the "HttpOnly" flag to the X-Mapping cookie that gets set when using transparent session affinity. $new_cookie = http.setResponseCookie ( "HTTP_ONLY" , "V5thaxebusejufre;path=/; HttpOnly" ) ; A second option is using the following TrafficScript response rule where the same cookie value from the X-Mapping cookie is also used for the HTTP_ONLY cookie. $cookie = http.getResponseCookie ( "X-Mapping-oajlgmia" ) ; log.info ( "Cookie value is: " . $cookie ) ; http.setResponseCookie ( "HTTP_ONLY" , $cookie . ";path=/; HttpOnly" ) ; Mike
... View more
10-25-2013
03:08:PM
1 Kudo
Stanley, Add the following rule to the virtual server as a request rule. Mike # Get the URL from the HTTP get request $path = http.getpath(); if( string.startsWithI( $path, "/EXCEPTION/" ) ) { pool.use( "EXCEPTION-POOL" ); } else { pool.use( "DEFAULT-POOL" ); }
... View more
10-23-2013
02:16:PM
A big thanks to John Naughton from Riverbed Support for pointing me in the right direction to get this TrafficScript rule working as desired. The finished product was to add some additional parentheses (see in bold below) where needed. As a side note, Notepad++ helps with showing what is bracketed with parentheses. ############# # VARIABLES # ############# # Look up the URL path $path = http.getpath(); # Look up the remote client IP address $ip = request.getRemoteIP(); ############## # CONDITIONS # ############## if ((( !string.ipmaskmatch ( $ip, "10.10.10.10/32") && !string.ipmaskmatch( $ip, "10.64.0.0/16" ) && !string.ipmaskmatch( $ip, "10.16.10.0/24" ) && !string.ipmaskmatch( $ip, "10.16.20.0/24" ) && !string.ipmaskmatch( $ip, "10.16.30.0/24" )) && (string.startsWithI( $path, "/beef" ) || string.startsWithI( $path, "/chicken" ) || string.startsWithI( $path, "/pork" ) || string.startsWithI( $path, "/bacon" ) || string.startsWithI( $path, "/veggies" )))) # # ACTION # { http.redirect( " http://www.google.com " ); }
... View more
10-22-2013
04:50:PM
My end goal is for a TrafficScript request rule that allows multiple subnets/hosts access to multiple URL paths using begins with logic, while redirecting those subnets/hosts not permitted to http://www.google.com . In plain English, the goal is: If the source subnet/host doesn't match 10.10.10.10/32 OR 10.64.0.0/16 OR 10.16.10.0/24 OR 10.16.20.0/24 OR 10.16.30.0/24 AND the URL path starts with /beef OR /chicken OR /port OR /bacon OR /veggies, then redirect the user to http://www.google.com . With the rule below, this logic works for /beef, but doesn't work correctly for the others (/chicken, /port, /bacon, /veggies). If I change the || (aka OR) to && (aka AND) for the URL match portion, all source IP addresses are permitted to the specified URL paths. ############# # VARIABLES # ############# # Look up the URL path $path = http.getpath(); # Look up the remote client IP address $ip = request.getRemoteIP(); ############### # CONDITIONS # ############### # if ( !string.ipmaskmatch ( $ip, "10.10.10.10/32") && !string.ipmaskmatch( $ip, "10.64.0.0/16" ) && !string.ipmaskmatch( $ip, "10.16.10.0/24" ) && !string.ipmaskmatch( $ip, "10.16.20.0/24" ) && !string.ipmaskmatch( $ip, "10.16.30.0/24" ) && string.startsWithI( $path, "/beef" ) || string.startsWithI( $path, "/chicken" ) || string.startsWithI( $path, "/pork" ) || string.startsWithI( $path, "/bacon" ) || string.startsWithI( $path, "/veggies" ) # # ACTION # { http.redirect( " http://www.google.com " ); }
... View more
10-22-2013
04:33:PM
Download the Microsoft Application Request Router (ARR) from Application Request Routing : The Official Microsoft IIS Site then install this on your IIS webserver. On the Stingray Traffic Manager (STM), create a request rule as shown below because the ARR looks for the real source IP in the X-Forwarded-For header whereas the STM adds the real IP address as the X-Cluster-Client-Ip header: # Look up the remote client IP address $ip = request.getRemoteIP ( ) ; # ACTIONS http.setheader ( "X-Forwarded-For" , $ip ) ;
... View more
07-15-2013
11:17:AM
I am seeing a syntax error when I copy and paste the provided TrafficScript rule to a Stingray Traffic Manager 8.1r1 virtual appliance. Any help to fix would be greatly appreciated. Warning: line 23: Unknown escape sequence '\ ' $html = "\n<script type=\"text/javascript\"> \n \ ^ Error: line 23: Unterminated string constant $html = "\n<script type=\"text/javascript\"> \n \ Error: line 24: syntax error, unexpected function var _gaq = _gaq || []; \n \
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
