Table of Contents
Advertisement
5. Use the request-rule, response-rule, or rule commands in conjunction with the
6. Use the Global stylepolicy command to create a Processing Policy.
7. Use the Processing Policy match command to associate a global rule with a
8. Use the stylesheet-policy command (XML Firewall and XSL Proxy) to associate
Configuring a Matching Rule
This command sequence creates a matching rule, named star, that provides a
universal match for all URLs.
# matching star
Matching configuration mode
# urlmatch *
# exit
Matching "star" successfully created
#
Configuring a Global Rule
This command sequence creates the validate-sign-encrypt global rule that:
1. Validates client and server generated documents against a named schema
2. Signs validated documents
3. Encrypts signed documents
4. Forwards encrypted documents to the destination client or server.
# rule validate-sign-encrypt-all
Processing Policy Rule configuration mode
# validate INPUT schema store:///soap-envelope-1.1.xsd
# xform INPUT store:///sign-wssec.xsl tmp1
# xform tmp1 store:///encrypt-soap.xsl OUTPUT
# exit
#
This command sequence creates the multi-step global rule that:
1. Transforms client requests using a specified style sheet
2. Transforms the results of the initial transforms using a second style sheet
3. Performs a final transformation using another style sheet
4. Forwards the final transformation to the target server
# rule multi-step request
Stylesheet Rule configuration mode
# xform INPUT http://10.1.1.8/XSL/XForm_1.xsl tmp1
# xform tmp1 http://10.1.1.8/XSL/XForm_2.xsl tmp2
# xform tmp2 http://10.1.1.8/XSL/XForm_2.xsl OUTPUT
# exit
#
Configuring a Processing Policy
This command sequence creates the validate-sign-encrypt-all Processing Policy
that uses the validate-sign-encrypt global rule with the star matching pattern.
1002
Command Reference
accept/reject decision) enable validation of an XML document against a
specified schema, verification of a document's digital signature, or
content-based XML/SOAP filtering.
xform and xformpi actions to add direction-specific transformation rules to the
global rule.
matching rule (created in Steps 1 and 2), and to assign the associated global
rule-matching rule pair to the Processing Policy.
the Processing Policy with an XML Firewall or XSL proxy.
Advertisement
Table of Contents
