Configuring A Matching Rule; Configuring A Processing Policy; Assigning A Processing Policy To A Datapower Service - IBM WebSphere XS40 Command Reference Manual

Datapower xml security gateway
Table of Contents

Advertisement

Configuring a Matching Rule

This command sequence creates a matching rule, named star, that provides a
universal match for all URLs.
# matching star
Matching configuration mode
# urlmatch *
(config-stylesheet-matching)# exit
Matching 'star' successfully created
#

Configuring a Processing Policy

This command sequence creates the validate-sign-encrypt-all Processing Policy
that:
1. Validates all client and server generated documents against a named schema
2. Signs all validated documents
3. Encrypts all signed documents
4. Forwards encrypted documents to the destination client or server.
# stylepolicy validate-sign-encrypt-all
Processing Policy configuration mode
# rule star
Processing Policy Rule configuration mode
# validate INPUT schema store:///soap-envelope-1.1.xsd
# xform INPUT store:///sign-wssec.xsl tmp1
# xform tmp1 store:///encrypt-soap.xsl OUTPUT
# exit
Stylesheet Rule "star" successfully created
# exit
Processing Policy "validate-sign-encrypt-all" successfully created
#
This command sequence creates the multi-step Processing Policy that:
1. Transforms all client requests using a specified style sheet
2. Transforms the results of the initial transforms using a second style sheet
3. Performs a final transformation using another style sheet
4. Forwards the final transformation to the target server
# stylepolicy multi-step
Processing Policy configuration mode
# request-rule star
Stylesheet Rule configuration mode
# xform INPUT http://10.1.1.8/XSL/XForm_1.xsl tmp1
# xform tmp1 http://10.1.1.8/XSL/XForm_2.xsl tmp2
# xform tmp2 http://10.1.1.8/XSL/XForm_3.xsl OUTPUT
# exit
Stylesheet Rule "star" successfully created
# exit
Processing Policy "multi-step" successfully created
#

Assigning a Processing Policy to a DataPower service

This command sequence creates the validate-sign-encrypt-all XML Firewall. The
sequence assigns the validate-sign-encrypt-all Processing Policy to the XML
Firewall of the same name.
# xmlfirewall validate-sign-encrypt-all
XML firewall configuration mode
# local-address 0 9050
# remote-address 10.10.0.1 9000
# xml-manager mgr1
1000
Command Reference

Advertisement

Table of Contents
loading

Table of Contents