修改管控策略deny动作、hijack动作、monitor动作请求curl执行命令
This commit is contained in:
@@ -32,9 +32,6 @@ Proxy-Policy-monitor-00002
|
||||
Comment 创建fqdn
|
||||
${objectDict} Create Dictionary objectType=fqdn_category isValid=${1} addItemList=*villaday.com
|
||||
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
||||
Comment #创建引用文件
|
||||
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404english.html resPages
|
||||
${profiledId} Get From Dictionary ${response} profileId
|
||||
Comment Comment 创建拦截策略
|
||||
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-monitor policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${objectId}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=3
|
||||
log ${policyDict}
|
||||
@@ -43,7 +40,6 @@ Proxy-Policy-monitor-00002
|
||||
${policyDict} Create Dictionary policyName=Proxy-Policy-monitor-00002 policyType=pxy_manipulation policyDesc=autotest action=monitor userRegion={"method":"monitor","protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=2
|
||||
log ${policyDict}
|
||||
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
||||
insert_policyId_to_file1 monitor_profileId ${profiledId}
|
||||
insert_policyId_to_file1 monitor_objectId1 ${objectId}
|
||||
insert_policyId_to_file1 intercept_monitor_policyId1 ${policyId1}
|
||||
insert_policyId_to_file1 monitor_policyId1 ${policyId2}
|
||||
@@ -56,9 +52,6 @@ Proxy-Policy-monitor-00003
|
||||
Comment 创建url
|
||||
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=www.wmtransfer*,$www.banbaowang.com/shouchaobao/,*qidian.com/rank,country=RU
|
||||
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
||||
Comment #创建引用文件
|
||||
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404china.html resPages
|
||||
${profiledId} Get From Dictionary ${response} profileId
|
||||
Comment Comment 创建拦截策略
|
||||
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-monitor policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${objectId}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=3
|
||||
log ${policyDict}
|
||||
@@ -67,7 +60,6 @@ Proxy-Policy-monitor-00003
|
||||
${policyDict} Create Dictionary policyName=Proxy-Policy-monitor-00003 policyType=pxy_manipulation policyDesc=autotest action=monitor userRegion={"method":"monitor","protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL isValid=${1} appIdObjects=2
|
||||
log ${policyDict}
|
||||
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
||||
insert_policyId_to_file1 monitor_profileId1 ${profiledId}
|
||||
insert_policyId_to_file1 monitor_objectId2 ${objectId}
|
||||
insert_policyId_to_file1 monitor_objectId3 ${objectId1}
|
||||
insert_policyId_to_file1 intercept_monitor_policyId2 ${policyId1}
|
||||
@@ -76,10 +68,10 @@ Proxy-Policy-monitor-00003
|
||||
Proxy-Policy-monitor-00004
|
||||
[Tags] 请求头
|
||||
Comment 创建fqdn
|
||||
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=*nielsen.com
|
||||
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=*usdebtclock.org
|
||||
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
||||
Comment 创建url
|
||||
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=insights
|
||||
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=state-of-california-debt-clock.html
|
||||
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
||||
Comment 创建请求头
|
||||
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=Mozilla/5.0*|User-Agent
|
||||
@@ -151,10 +143,10 @@ Proxy-Policy-monitor-00006
|
||||
Proxy-Policy-monitor-00007
|
||||
[Tags] 请求头
|
||||
Comment 创建fqdn
|
||||
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$www.europages.com.ru
|
||||
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$peoplestalkradio.com
|
||||
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
||||
Comment 创建url
|
||||
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=ezhegodnik
|
||||
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=forums/register.php
|
||||
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
||||
Comment 创建请求头
|
||||
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=*Safari/537.36|User-Agent
|
||||
@@ -184,9 +176,6 @@ Proxy-Policy-monitor-00008
|
||||
Comment 创建请求头
|
||||
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=*utf-8|Content-Type
|
||||
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
|
||||
Comment #创建引用文件
|
||||
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404china.html resPages
|
||||
${profiledId} Get From Dictionary ${response} profileId
|
||||
Comment Comment 创建拦截策略
|
||||
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-monitor policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=2
|
||||
log ${policyDict}
|
||||
@@ -195,7 +184,6 @@ Proxy-Policy-monitor-00008
|
||||
${policyDict} Create Dictionary policyName=Proxy-Policy-monitor-00008 policyType=pxy_manipulation policyDesc=autotest action=monitor userRegion={"method":"monitor","protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_RES_HDR isValid=${1} appIdObjects=2
|
||||
log ${policyDict}
|
||||
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
||||
insert_policyId_to_file1 monitor_profileId2 ${profiledId}
|
||||
insert_policyId_to_file1 monitor_objectId16 ${objectId}
|
||||
insert_policyId_to_file1 monitor_objectId17 ${objectId1}
|
||||
insert_policyId_to_file1 monitor_objectId18 ${objectId2}
|
||||
@@ -213,9 +201,6 @@ Proxy-Policy-monitor-00009
|
||||
Comment 创建请求头
|
||||
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=$text/html; charset=utf-8|Content-Type
|
||||
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
|
||||
Comment #创建引用文件
|
||||
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404china.html resPages
|
||||
${profiledId} Get From Dictionary ${response} profileId
|
||||
Comment Comment 创建拦截策略
|
||||
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-monitor policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=2
|
||||
log ${policyDict}
|
||||
@@ -224,7 +209,6 @@ Proxy-Policy-monitor-00009
|
||||
${policyDict} Create Dictionary policyName=Proxy-Policy-monitor-00009 policyType=pxy_manipulation policyDesc=autotest action=monitor userRegion={"method":"monitor","protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_RES_HDR isValid=${1} appIdObjects=2
|
||||
log ${policyDict}
|
||||
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
||||
insert_policyId_to_file1 monitor_profileId3 ${profiledId}
|
||||
insert_policyId_to_file1 monitor_objectId19 ${objectId}
|
||||
insert_policyId_to_file1 monitor_objectId20 ${objectId1}
|
||||
insert_policyId_to_file1 monitor_objectId21 ${objectId2}
|
||||
@@ -242,9 +226,6 @@ Proxy-Policy-monitor-00010
|
||||
Comment 创建请求头
|
||||
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=text/html|Content-Type
|
||||
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
|
||||
Comment #创建引用文件
|
||||
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404english.html resPages
|
||||
${profiledId} Get From Dictionary ${response} profileId
|
||||
Comment Comment 创建拦截策略
|
||||
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-monitor policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=2
|
||||
log ${policyDict}
|
||||
@@ -253,7 +234,6 @@ Proxy-Policy-monitor-00010
|
||||
${policyDict} Create Dictionary policyName=Proxy-Policy-monitor-00010 policyType=pxy_manipulation policyDesc=autotest action=monitor userRegion={"method":"monitor","protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_RES_HDR isValid=${1} appIdObjects=2
|
||||
log ${policyDict}
|
||||
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
||||
insert_policyId_to_file1 monitor_profileId4 ${profiledId}
|
||||
insert_policyId_to_file1 monitor_objectId22 ${objectId}
|
||||
insert_policyId_to_file1 monitor_objectId23 ${objectId1}
|
||||
insert_policyId_to_file1 monitor_objectId24 ${objectId2}
|
||||
@@ -271,9 +251,6 @@ Proxy-Policy-monitor-00011
|
||||
Comment 创建请求头
|
||||
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=text*|Content-Type
|
||||
${rescode} ${objectId2} AddObject2 ${1} ${objectDict}
|
||||
Comment #创建引用文件
|
||||
${response} CreatePolicyFile2 ${url} ${responsePageFiles} 404english.html resPages
|
||||
${profiledId} Get From Dictionary ${response} profileId
|
||||
Comment Comment 创建拦截策略
|
||||
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-monitor policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=2
|
||||
log ${policyDict}
|
||||
@@ -282,7 +259,6 @@ Proxy-Policy-monitor-00011
|
||||
${policyDict} Create Dictionary policyName=Proxy-Policy-monitor-00011 policyType=pxy_manipulation policyDesc=autotest action=monitor userRegion={"method":"monitor","protocol":"HTTP"} filterList=${objectId1}|TSG_FIELD_HTTP_URL,${objectId2}|TSG_FIELD_HTTP_RES_HDR isValid=${1} appIdObjects=2
|
||||
log ${policyDict}
|
||||
${rescode} ${policyId2} AddPolicies 1 ${policyDict} v2
|
||||
insert_policyId_to_file1 monitor_profileId5 ${profiledId}
|
||||
insert_policyId_to_file1 monitor_objectId25 ${objectId}
|
||||
insert_policyId_to_file1 monitor_objectId26 ${objectId1}
|
||||
insert_policyId_to_file1 monitor_objectId27 ${objectId2}
|
||||
@@ -317,10 +293,10 @@ Proxy-Policy-monitor-00012
|
||||
Proxy-Policy-monitor-00013
|
||||
[Tags] set-cookie
|
||||
Comment 创建fqdn
|
||||
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$www.nypl.org,*webpronews.com,*ke.com,$nationalbank.kz
|
||||
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$www.nypl.org,*thailand.com.co,*ke.com,$nationalbank.kz
|
||||
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
||||
Comment 创建set-cookie
|
||||
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=incap_ses*|Set-Cookie,*Secure|Set-Cookie,domain=.ke.com|Set-Cookie,irkzadmin_session*|Set-Cookie
|
||||
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=incap_ses*|Set-Cookie,*Max-Age=604800|Set-Cookie,domain=.ke.com|Set-Cookie,irkzadmin_session*|Set-Cookie
|
||||
${rescode} ${objectId1} AddObject2 ${1} ${objectDict}
|
||||
Comment 创建拦截策略
|
||||
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-monitor policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${objectId}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=3
|
||||
@@ -411,7 +387,7 @@ Proxy-Policy-monitor-00017
|
||||
${objectDict} Create Dictionary objectType=http_signature isValid=${1} addItemList=Domain=.umusicpub.com|Set-Cookie
|
||||
${rescode} ${object_yd_Id} AddObject2 ${1} ${objectDict}
|
||||
Comment 创建应答体
|
||||
${objectDict} Create Dictionary objectType=keywords isValid=${1} addItemList=unsuccessful
|
||||
${objectDict} Create Dictionary objectType=keywords isValid=${1} addItemList=website
|
||||
${rescode} ${object_body_Id} AddObject2 ${1} ${objectDict}
|
||||
Comment 创建拦截策略
|
||||
${policyDict} Create Dictionary policyName=SecurityPolicy-Intercept-monitor policyType=tsg_security policyDesc=autotest action=intercept userRegion={"protocol":"SSL","keyring":1,"decryption":1,"decrypt_mirror":{"enable":0,"mirror_profile":null}} filterList=${object_fqdn_Id}|TSG_FIELD_SSL_SNI isValid=${1} appIdObjects=3
|
||||
|
||||
Reference in New Issue
Block a user