Novell ACCESS MANAGER 3.1 SP2 - POLICY GUIDE 2010 Manual page 140

The Access Gateway Appliance checks the files for the following content types:
text/html
text/xml
text/css
text/javascript
application/javascript
application/x-javascript
If a file has no content type or has a type other than one in the above list, the Access Gateway
Appliance skips the file.
The Access Gateway Service does not check for content type; it just parses the files that match the
URL.
Creating a Form Matching Rule
To create a successful Form Fill policy, you need to create a matching rule that matches the policy to
the HTML page that contains the form, and then matches the form on the page. The Access Gateway
uses the following rules, in the order listed, when determining whether a page contains the required
form:
1. Matches the protected resource path in the URL with the page. If they don't match, the page is
rejected. If they match, continues. For more information, see
Resource" on page
2. Checks for CGI criteria. If they don't match, the page is rejected. If they match or no criteria is
specified, continues. For more information, see
3. Checks for page matching criteria. If they don't match, the page is rejected. If they match or no
page matching criteria is specified, continues. For more information, see
Matching Criteria" on page
4. Checks the form name criteria (which can be the
attribute, or a number). If it doesn't match, the page is rejected. If it matches, the form is
processed. For more information, see
When the Access Gateway uses URL or CGI criteria, it can make a match early in the filling
process. This allows the Access Gateway to fill the data from the Web server and send it, almost
simultaneously, to the browser. However, if the Access Gateway is configured to use page matching
criteria, the Access Gateway must retrieve the entire page from the Web server, process it, and then
determine whether the page needs to fill a form. All this processing must be completed before the
Access Gateway can send any data to the browser. Unless the page is quite small, users will clearly
perceive the delay.
The form name matching criteria are not used for page matching. They are used to determine which
form on the page is selected. Use the following methods to match the page and the form:
"Using the URL of the Protected Resource" on page 141
"Using CGI Matching Criteria" on page 141
"Using Page Matching Criteria" on page 141
"Using Form Name Criteria" on page 142
140 Novell Access Manager 3.1 SP2 Policy Guide
141.
141.
"Using Form Name Criteria" on page
"Using the URL of the Protected
"Using CGI Matching Criteria" on page
name attribute, the
<FORM>
141.
"Using Page
ID
<FORM>
142.