Table of Contents
Advertisement
# stylesheet-policy validate-sign-encrypt-all
# parameter keypair ALICE
# parameter recipient Alice
# request-type xml
# response-type unprocessed
# exit
XML Firewall update successful
#
# xmlfirewall validate-sign-encrypt-all
XML firewall configuration mode
# local-address 0 9050
# remote-address 10.10.0.1 9000
# xml-manager mgr1
# stylesheet-policy validate-sign-encrypt-all
# parameter keypair ALICE
# parameter recipient Alice
# request-type xml
# response-type unprocessed
# exit
XML Firewall update successful
#
This command sequence creates the multi-step XSL Proxy. The sequence assigns
the multi-step Processing Policy to the XSL Proxy of the same name.
# xslproxy multi-step
XSL proxy configuration mode
# local-address 0 64000
# remote-address 10.12.12.1 64000
# xml-manager mgr1
# stylesheet-policy multi-step
# request-type xml
# response-type unprocessed
# exit
XSL Proxy update successful
#
Stylesheet policies using global rules
Use the following procedure to implement a processing policy using global rules.
1. Use the matching command to enter Matching Rule configuration mode and to
2. Use the urlmatch command or the httpmatch command to populate the
3. Use the Global rule command to create a named directional rule; this named
4. For XML Firewall services only, use the request-rule, response-rule, or rule
create a named matching rule or rules.
matching rules with shell-style match patterns. The URL or HTTP match
patterns specify the conditions under which policy-based XSL filtering or
transformation will be performed.
You can use wildcards to define a match pattern as follows:
*
The string wildcard matches 0 or more occurrences of any character.
?
The single character wildcard matches one occurrence of any single
character.
[]
The delimiters bracket a character or numeric range:
Matches 1, 2, 3, 4, or 5
[1-5]
Matches x or y
[xy]
global rule will be available to all stylesheet policies.
commands in conjunction with the filter and validate actions to add
direction-specific filters to the global rule. Filters (which result in an
Appendix B. Processing Policy procedures
1001
Advertisement
Table of Contents
