修改策略添加条件成功
This commit is contained in:
@@ -889,28 +889,12 @@ SecurityPolicy-Deny-Http-00030
|
|||||||
${rescode} ${object_fqdn_Id} AddObject2 ${1} ${objectDict}
|
${rescode} ${object_fqdn_Id} AddObject2 ${1} ${objectDict}
|
||||||
${objectids} set Variable ${object_fqdn_Id}
|
${objectids} set Variable ${object_fqdn_Id}
|
||||||
Comment 创建url
|
Comment 创建url
|
||||||
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=youtube
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=nationalbank
|
||||||
${rescode} ${object_url_Id} AddObject2 ${1} ${objectDict}
|
${rescode} ${object_url_Id} AddObject2 ${1} ${objectDict}
|
||||||
${objectids} Catenate SEPARATOR=, ${objectids} ${object_url_Id}
|
${objectids} Catenate SEPARATOR=, ${objectids} ${object_url_Id}
|
||||||
Comment 创建安全策略
|
Comment 创建安全策略
|
||||||
${policyDict} Create Dictionary policyName=SecurityPolicy-Deny-HTTP-00030 policyType=tsg_security policyDesc=autotest userTags= action=deny effectiveRange= userRegion={"protocol": "HTTP","method":"drop"} referenceObject=${object_fqdn_Id}|TSG_FIELD_HTTP_HOST isValid=${1} appObjectIdArray=2
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Deny-HTTP-00030 policyType=tsg_security policyDesc=autotest userTags= action=deny effectiveRange= userRegion={"protocol": "HTTP","method":"drop"} referenceObject=${object_fqdn_Id}|TSG_FIELD_HTTP_HOST isValid=${1} appObjectIdArray=2
|
||||||
${rescode} ${policyId} AddPolicy2 ${1} ${policyDict}
|
${rescode} ${policyId} AddPolicy2 ${1} ${policyDict}
|
||||||
Comment 功能端验证HTTP验证
|
|
||||||
${commandstr} run keyword if '${systemType}'=='Windows' set variable ${curlbatpath}/selfserver/SecurityPolicy-Intercept-HTTP-0002.bat
|
|
||||||
... ELSE set variable curl http://open.node.com/test/youtube/youtube.html
|
|
||||||
${stringlist} run keyword if '${systemType}'=='Windows' Create List Connection was reset
|
|
||||||
... ELSE Create List Message content over the limit has been removed
|
|
||||||
${starttime} Get Time
|
|
||||||
Sleep ${policyVerificationSleepSeconds}s
|
|
||||||
${rescode} SystemCommands ${commandstr} ${stringlist}
|
|
||||||
Sleep ${policyLogVerificationSleepSeconds}s
|
|
||||||
${endtime} Get Time
|
|
||||||
#日志验证
|
|
||||||
${s} Convert to String ${policyId}
|
|
||||||
GetLogList security_event_log ${starttime} ${endtime} ${testClentIP} ${s} http_host open.node.com
|
|
||||||
Comment 修改策略
|
|
||||||
${policyDict} Create Dictionary policyName=SecurityPolicy-Deny-HTTP-00030 policyType=tsg_security policyDesc=autotest userTags= action=deny effectiveRange= userRegion={"protocol": "HTTP","method":"drop"} referenceObject=${object_fqdn_Id}|TSG_FIELD_HTTP_HOST,${object_url_Id}|TSG_FIELD_HTTP_URL isValid=${1} appObjectIdArray=2 policyId=${policyId}
|
|
||||||
${rescode} ${policyId} EditPolicy ${1} ${policyDict} update
|
|
||||||
#删除策略
|
#删除策略
|
||||||
${policyIds} Create List {"policyType":"tsg_security","policyIds":[${policyId}]}
|
${policyIds} Create List {"policyType":"tsg_security","policyIds":[${policyId}]}
|
||||||
Comment 功能端验证HTTP验证
|
Comment 功能端验证HTTP验证
|
||||||
@@ -926,3 +910,18 @@ SecurityPolicy-Deny-Http-00030
|
|||||||
#日志验证
|
#日志验证
|
||||||
${s} Convert to String ${policyId}
|
${s} Convert to String ${policyId}
|
||||||
GetLogList security_event_log ${starttime} ${endtime} ${testClentIP} ${s} http_host open.node.com
|
GetLogList security_event_log ${starttime} ${endtime} ${testClentIP} ${s} http_host open.node.com
|
||||||
|
Comment 修改策略
|
||||||
|
${policyDict} Create Dictionary policyName=SecurityPolicy-Deny-HTTP-00030 policyType=tsg_security policyDesc=autotest userTags= action=deny effectiveRange= userRegion={"protocol": "HTTP","method":"drop"} referenceObject=${object_fqdn_Id}|TSG_FIELD_HTTP_HOST,${object_url_Id}|TSG_FIELD_HTTP_URL isValid=${1} appObjectIdArray=2 policyId=${policyId}
|
||||||
|
${rescode} ${policyId} EditPolicy ${policyDict} update
|
||||||
|
Comment 功能端验证HTTP验证
|
||||||
|
${commandstr} run keyword if '${systemType}'=='Windows' set variable ${curlbatpath}/selfserver/SecurityPolicy-Intercept-HTTP-0003.bat
|
||||||
|
... ELSE set variable curl \ http://open.node.com/test/nationalbank/nationalbank.html
|
||||||
|
${stringlist} run keyword if '${systemType}'=='Windows' Create List Connection was reset
|
||||||
|
... ELSE Create List Message content over the limit has been removed
|
||||||
|
${starttime} Get Time
|
||||||
|
Sleep ${policyVerificationSleepSeconds}s
|
||||||
|
${rescode} SystemCommands ${commandstr} ${stringlist}
|
||||||
|
Sleep ${policyLogVerificationSleepSeconds}s
|
||||||
|
${endtime} Get Time
|
||||||
|
#日志验证
|
||||||
|
GetLogList security_event_log ${starttime} ${endtime} ${testClentIP} ${s} http_host open.node.com
|
||||||
|
|||||||
Reference in New Issue
Block a user