修改管控策略deny动作、hijack动作、monitor动作请求curl执行命令

This commit is contained in:
jwc
2020-08-06 18:39:36 +08:00
parent 7ef4a7e0d9
commit 94661e4f31
31 changed files with 170 additions and 163 deletions

View File

@@ -32,9 +32,6 @@ Proxy-Policy-monitor-00002
Comment 创建fqdn
${objectDict} Create Dictionary objectType=fqdn_category isValid=${1} addItemList=*villaday.com
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
Comment #创建引用文件
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404english.html resPages
${profiledId} Get From Dictionary ${response} profileId
Comment Comment 创建拦截策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-monitor policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${objectId}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=3
log ${policyDict}
@@ -43,7 +40,6 @@ Proxy-Policy-monitor-00002
${policyDict} Create Dictionary policyName=Proxy-Policy-monitor-00002 policyType=pxy_manipulation policyDesc=autotest action=monitor userRegion={"method":"monitor","protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=2
log ${policyDict}
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
insert_policyId_to_file1 monitor_profileId ${profiledId}
insert_policyId_to_file1 monitor_objectId1 ${objectId}
insert_policyId_to_file1 intercept_monitor_policyId1 ${policyId1}
insert_policyId_to_file1 monitor_policyId1 ${policyId2}
@@ -56,9 +52,6 @@ Proxy-Policy-monitor-00003
Comment 创建url
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=www.wmtransfer*,$www.banbaowang.com/shouchaobao/,*qidian.com/rank,country=RU
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
Comment #创建引用文件
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404china.html resPages
${profiledId} Get From Dictionary ${response} profileId
Comment Comment 创建拦截策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-monitor policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${objectId}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=3
log ${policyDict}
@@ -67,7 +60,6 @@ Proxy-Policy-monitor-00003
${policyDict} Create Dictionary policyName=Proxy-Policy-monitor-00003 policyType=pxy_manipulation policyDesc=autotest action=monitor userRegion={"method":"monitor","protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL isValid=${1} appIdObjects=2
log ${policyDict}
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
insert_policyId_to_file1 monitor_profileId1 ${profiledId}
insert_policyId_to_file1 monitor_objectId2 ${objectId}
insert_policyId_to_file1 monitor_objectId3 ${objectId1}
insert_policyId_to_file1 intercept_monitor_policyId2 ${policyId1}
@@ -76,10 +68,10 @@ Proxy-Policy-monitor-00003
Proxy-Policy-monitor-00004
[Tags] 请求头
Comment 创建fqdn
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=*nielsen.com
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=*usdebtclock.org
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
Comment 创建url
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=insights
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=state-of-california-debt-clock.html
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
Comment 创建请求头
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=Mozilla/5.0*|User-Agent
@@ -151,10 +143,10 @@ Proxy-Policy-monitor-00006
Proxy-Policy-monitor-00007
[Tags] 请求头
Comment 创建fqdn
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$www.europages.com.ru
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$peoplestalkradio.com
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
Comment 创建url
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=ezhegodnik
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=forums/register.php
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
Comment 创建请求头
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=*Safari/537.36|User-Agent
@@ -184,9 +176,6 @@ Proxy-Policy-monitor-00008
Comment 创建请求头
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=*utf-8|Content-Type
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
Comment #创建引用文件
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404china.html resPages
${profiledId} Get From Dictionary ${response} profileId
Comment Comment 创建拦截策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-monitor policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=2
log ${policyDict}
@@ -195,7 +184,6 @@ Proxy-Policy-monitor-00008
${policyDict} Create Dictionary policyName=Proxy-Policy-monitor-00008 policyType=pxy_manipulation policyDesc=autotest action=monitor userRegion={"method":"monitor","protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_RES_HDR isValid=${1} appIdObjects=2
log ${policyDict}
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
insert_policyId_to_file1 monitor_profileId2 ${profiledId}
insert_policyId_to_file1 monitor_objectId16 ${objectId}
insert_policyId_to_file1 monitor_objectId17 ${objectId1}
insert_policyId_to_file1 monitor_objectId18 ${objectId2}
@@ -213,9 +201,6 @@ Proxy-Policy-monitor-00009
Comment 创建请求头
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=$text/html; charset=utf-8|Content-Type
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
Comment #创建引用文件
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404china.html resPages
${profiledId} Get From Dictionary ${response} profileId
Comment Comment 创建拦截策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-monitor policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=2
log ${policyDict}
@@ -224,7 +209,6 @@ Proxy-Policy-monitor-00009
${policyDict} Create Dictionary policyName=Proxy-Policy-monitor-00009 policyType=pxy_manipulation policyDesc=autotest action=monitor userRegion={"method":"monitor","protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_RES_HDR isValid=${1} appIdObjects=2
log ${policyDict}
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
insert_policyId_to_file1 monitor_profileId3 ${profiledId}
insert_policyId_to_file1 monitor_objectId19 ${objectId}
insert_policyId_to_file1 monitor_objectId20 ${objectId1}
insert_policyId_to_file1 monitor_objectId21 ${objectId2}
@@ -242,9 +226,6 @@ Proxy-Policy-monitor-00010
Comment 创建请求头
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=text/html|Content-Type
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
Comment #创建引用文件
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404english.html resPages
${profiledId} Get From Dictionary ${response} profileId
Comment Comment 创建拦截策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-monitor policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=2
log ${policyDict}
@@ -253,7 +234,6 @@ Proxy-Policy-monitor-00010
${policyDict} Create Dictionary policyName=Proxy-Policy-monitor-00010 policyType=pxy_manipulation policyDesc=autotest action=monitor userRegion={"method":"monitor","protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_RES_HDR isValid=${1} appIdObjects=2
log ${policyDict}
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
insert_policyId_to_file1 monitor_profileId4 ${profiledId}
insert_policyId_to_file1 monitor_objectId22 ${objectId}
insert_policyId_to_file1 monitor_objectId23 ${objectId1}
insert_policyId_to_file1 monitor_objectId24 ${objectId2}
@@ -271,9 +251,6 @@ Proxy-Policy-monitor-00011
Comment 创建请求头
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=text*|Content-Type
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
Comment #创建引用文件
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404english.html resPages
${profiledId} Get From Dictionary ${response} profileId
Comment Comment 创建拦截策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-monitor policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=2
log ${policyDict}
@@ -282,7 +259,6 @@ Proxy-Policy-monitor-00011
${policyDict} Create Dictionary policyName=Proxy-Policy-monitor-00011 policyType=pxy_manipulation policyDesc=autotest action=monitor userRegion={"method":"monitor","protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_RES_HDR isValid=${1} appIdObjects=2
log ${policyDict}
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
insert_policyId_to_file1 monitor_profileId5 ${profiledId}
insert_policyId_to_file1 monitor_objectId25 ${objectId}
insert_policyId_to_file1 monitor_objectId26 ${objectId1}
insert_policyId_to_file1 monitor_objectId27 ${objectId2}
@@ -317,10 +293,10 @@ Proxy-Policy-monitor-00012
Proxy-Policy-monitor-00013
[Tags] set-cookie
Comment 创建fqdn
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$www.nypl.org,*webpronews.com,*ke.com,$nationalbank.kz
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$www.nypl.org,*thailand.com.co,*ke.com,$nationalbank.kz
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
Comment 创建set-cookie
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=incap_ses*|Set-Cookie,*Secure|Set-Cookie,domain=.ke.com|Set-Cookie,irkzadmin_session*|Set-Cookie
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=incap_ses*|Set-Cookie,*Max-Age=604800|Set-Cookie,domain=.ke.com|Set-Cookie,irkzadmin_session*|Set-Cookie
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
Comment 创建拦截策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-monitor policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${objectId}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=3
@@ -411,7 +387,7 @@ Proxy-Policy-monitor-00017
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=Domain=.umusicpub.com|Set-Cookie
${rescode} ${object_yd_Id} AddObject2 ${1} ${objectDict}
Comment 创建应答体
${objectDict} Create Dictionary objectType=keywords isValid=${1} addItemList=unsuccessful
${objectDict} Create Dictionary objectType=keywords isValid=${1} addItemList=website
${rescode} ${object_body_Id} AddObject2 ${1} ${objectDict}
Comment 创建拦截策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-monitor policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${object_fqdn_Id}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=3