安全策略monitor动作,dns、ssl、ftp协议策略,由于环境问题未进行功能验证

This commit is contained in:
jwc
2020-06-30 17:03:22 +08:00
parent d02069b67d
commit 9c133d0a70
9 changed files with 616 additions and 0 deletions

View File

@@ -0,0 +1,57 @@
*** Settings ***
Force Tags tsg_adc_wp adc_api security_policy
Library OperatingSystem
Resource ../../../02-Keyword/tsg_adc/SystemCommand.robot
Resource ../../../02-Keyword/tsg_bfapi/PolicyObject.robot
Resource ../../../02-Keyword/tsg_bfapi/LogVariable.robot
Resource ../../../02-Keyword/tsg_adc/FileOperation.robot
Resource ../../../02-Keyword/tsg_adc/FileOperation.robot
*** Test Cases ***
SecurityPolicy-Monitor-Dns-00001
[Tags] fqdn
Comment 创建fqdn
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$www.facebook.com,*ok.ru
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
Comment 创建安全策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Monitor-Dns-00001 policyType=tsg_security policyDesc=autotest action=monitor userRegion={"protocol":"DNS"} referenceObject=${objectId}|TSG_FIELD_DNS_QNAME isValid=${1} appObjectIdArray=4
log ${policyDict}
${rescode} ${policyId} AddPolicy2 ${1} ${policyDict}
insert_policyId_to_file1 monitor_dns_objectId ${objectId}
insert_policyId_to_file1 monitor_dns_policyId ${policyId}
SecurityPolicy-Monitor-Dns-00002
[Tags] cat
Comment 创建cat
${objectDict} Create Dictionary objectType=fqdn_category isValid=${1} addItemList=*yhd.com,$www.vk.com
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
Comment 创建安全策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Monitor-Dns-00002 policyType=tsg_security policyDesc=autotest action=monitor userRegion={"protocol":"DNS"} referenceObject=${objectId}|TSG_FIELD_DNS_QNAME isValid=${1} appObjectIdArray=4
log ${policyDict}
${rescode} ${policyId} AddPolicy2 ${1} ${policyDict}
insert_policyId_to_file1 monitor_dns_objectId1 ${objectId}
insert_policyId_to_file1 monitor_dns_policyId1 ${policyId}
SecurityPolicy-Monitor-Dns-00003
[Tags] cat
Comment 创建cat
${objectDict} Create Dictionary objectType=fqdn_category isValid=${1} addItemList=*ya.ru
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
Comment 创建安全策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Monitor-Dns-00003 policyType=tsg_security policyDesc=autotest action=monitor userRegion={"protocol":"DNS"} referenceObject=${objectId}|TSG_FIELD_DNS_QNAME isValid=${1} appObjectIdArray=4
log ${policyDict}
${rescode} ${policyId} AddPolicy2 ${1} ${policyDict}
insert_policyId_to_file1 monitor_dns_objectId2 ${objectId}
insert_policyId_to_file1 monitor_dns_policyId2 ${policyId}
SecurityPolicy-Monitor-Dns-00004
[Tags] 最大重定向
Comment 创建fqdn
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=*youtube.com
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
Comment 创建安全策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Monitor-Dns-00004 policyType=tsg_security policyDesc=autotest action=monitor userRegion={"protocol":"DNS"} referenceObject=${objectId}|TSG_FIELD_DNS_QNAME isValid=${1} appObjectIdArray=4
log ${policyDict}
${rescode} ${policyId} AddPolicy2 ${1} ${policyDict}
insert_policyId_to_file1 monitor_dns_objectId3 ${objectId}
insert_policyId_to_file1 monitor_dns_policyId3 ${policyId}

View File

@@ -0,0 +1,85 @@
*** Settings ***
Force Tags tsg_adc_wp adc_api security_policy
Library OperatingSystem
Resource ../../../02-Keyword/tsg_adc/SystemCommand.robot
Resource ../../../02-Keyword/tsg_bfapi/PolicyObject.robot
Resource ../../../02-Keyword/tsg_bfapi/LogVariable.robot
Resource ../../../02-Keyword/tsg_adc/FileOperation.robot
Resource ../../../02-Keyword/tsg_adc/FileOperation.robot
*** Test Cases ***
SecurityPolicy-Monitor-Ftp-00001
[Tags] 子串匹配
Comment 创建Account
${objectDict} Create Dictionary objectType=account isValid=${1} addItemList=ftp_user
${rescode} ${object_Account_Id} AddObject2 ${1} ${objectDict}
Comment 创建url
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=123456.txt
${rescode} ${object_url_Id} AddObject2 ${1} ${objectDict}
Comment 创建content
${objectDict} Create Dictionary objectType=keywords isValid=${1} addItemList=пациен
${rescode} ${object_content_Id} AddObject2 ${1} ${objectDict}
Comment 创建安全策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Monitor-FTP-00001 policyType=tsg_security policyDesc=autotest action=monitor userRegion={"protocol":"FTP"} referenceObject=${object_Account_Id}|TSG_FIELD_FTP_ACCOUNT,${object_content_Id}|TSG_FIELD_FTP_CONTENT,${object_url_Id}|TSG_FIELD_FTP_URI isValid=${1} appObjectIdArray=6
${rescode} ${policyId} AddPolicy2 ${1} ${policyDict}
insert_policyId_to_file1 monitor_ftp_objectId ${object_Account_Id}
insert_policyId_to_file1 monitor_ftp_objectId1 ${object_url_Id}
insert_policyId_to_file1 monitor_ftp_objectId2 ${object_content_Id}
insert_policyId_to_file1 monitor_ftp_policyId ${policyId}
SecurityPolicy-Monitor-Ftp-00002
[Tags] 右匹配
Comment 创建Account
${objectDict} Create Dictionary objectType=account isValid=${1} addItemList=*user
${rescode} ${object_Account_Id} AddObject2 ${1} ${objectDict}
Comment 创建url
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=*est.txt
${rescode} ${object_url_Id} AddObject2 ${1} ${objectDict}
Comment 创建content
${objectDict} Create Dictionary objectType=keywords isValid=${1} addItemList=*st.txt
${rescode} ${object_content_Id} AddObject2 ${1} ${objectDict}
Comment 创建安全策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Monitor-FTP-00002 policyType=tsg_security policyDesc=autotest action=monitor userRegion={"protocol":"FTP"} referenceObject=${object_Account_Id}|TSG_FIELD_FTP_ACCOUNT,${object_content_Id}|TSG_FIELD_FTP_CONTENT,${object_url_Id}|TSG_FIELD_FTP_URI isValid=${1} appObjectIdArray=6
${rescode} ${policyId} AddPolicy2 ${1} ${policyDict}
insert_policyId_to_file1 monitor_ftp_objectId3 ${object_Account_Id}
insert_policyId_to_file1 monitor_ftp_objectId4 ${object_url_Id}
insert_policyId_to_file1 monitor_ftp_objectId5 ${object_content_Id}
insert_policyId_to_file1 monitor_ftp_policyId1 ${policyId}
SecurityPolicy-Monitor-Ftp-00003
[Tags] 完整匹配
Comment 创建Account
${objectDict} Create Dictionary objectType=account isValid=${1} addItemList=$ftp_user
${rescode} ${object_Account_Id} AddObject2 ${1} ${objectDict}
Comment 创建url
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=$ftp://192.168.100.5/wlcsy.txt
${rescode} ${object_url_Id} AddObject2 ${1} ${objectDict}
Comment 创建content
${objectDict} Create Dictionary objectType=keywords isValid=${1} addItemList=$中文文件内容
${rescode} ${object_content_Id} AddObject2 ${1} ${objectDict}
Comment 创建安全策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Monitor-FTP-00003 policyType=tsg_security policyDesc=autotest action=monitor userRegion={"protocol":"FTP"} referenceObject=${object_Account_Id}|TSG_FIELD_FTP_ACCOUNT,${object_content_Id}|TSG_FIELD_FTP_CONTENT,${object_url_Id}|TSG_FIELD_FTP_URI isValid=${1} appObjectIdArray=6
${rescode} ${policyId} AddPolicy2 ${1} ${policyDict}
insert_policyId_to_file1 monitor_ftp_objectId6 ${object_Account_Id}
insert_policyId_to_file1 monitor_ftp_objectId7 ${object_url_Id}
insert_policyId_to_file1 monitor_ftp_objectId8 ${object_content_Id}
insert_policyId_to_file1 monitor_ftp_policyId2 ${policyId}
SecurityPolicy-Monitor-Ftp-00004
[Tags] 左匹配
Comment 创建Account
${objectDict} Create Dictionary objectType=account isValid=${1} addItemList=ftp_u*
${rescode} ${object_Account_Id} AddObject2 ${1} ${objectDict}
Comment 创建url
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=ftp://192.168.100*
${rescode} ${object_url_Id} AddObject2 ${1} ${objectDict}
Comment 创建content
${objectDict} Create Dictionary objectType=keywords isValid=${1} addItemList=409 пациентов*
${rescode} ${object_content_Id} AddObject2 ${1} ${objectDict}
Comment 创建安全策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Monitor-FTP-00004 policyType=tsg_security policyDesc=autotest action=monitor userRegion={"protocol":"FTP"} referenceObject=${object_Account_Id}|TSG_FIELD_FTP_ACCOUNT,${object_content_Id}|TSG_FIELD_FTP_CONTENT,${object_url_Id}|TSG_FIELD_FTP_URI isValid=${1} appObjectIdArray=6
${rescode} ${policyId} AddPolicy2 ${1} ${policyDict}
insert_policyId_to_file1 monitor_ftp_objectId9 ${object_Account_Id}
insert_policyId_to_file1 monitor_ftp_objectId10 ${object_url_Id}
insert_policyId_to_file1 monitor_ftp_objectId11 ${object_content_Id}
insert_policyId_to_file1 monitor_ftp_policyId3 ${policyId}

View File

@@ -0,0 +1,57 @@
*** Settings ***
Force Tags tsg_adc_wp adc_api security_policy
Library OperatingSystem
Resource ../../../02-Keyword/tsg_adc/SystemCommand.robot
Resource ../../../02-Keyword/tsg_bfapi/PolicyObject.robot
Resource ../../../02-Keyword/tsg_bfapi/LogVariable.robot
Resource ../../../02-Keyword/tsg_adc/FileOperation.robot
Resource ../../../02-Keyword/tsg_adc/FileOperation.robot
*** Test Cases ***
SecurityPolicy-Monitor-Ssl-00001
[Tags] sni fqdn
Comment 创建fqdn
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=$www.cxwl.com,*freestockimages.ru
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
Comment 创建安全策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Monitor-Ssl-00001 policyType=tsg_security policyDesc=autotest action=monitor userRegion={"protocol":"SSL"} referenceObject=${objectId}|TSG_FIELD_SSL_SNI isValid=${1} appObjectIdArray=3
log ${policyDict}
${rescode} ${policyId} AddPolicy2 ${1} ${policyDict}
insert_policyId_to_file1 monitor_ssl_objectId ${objectId}
insert_policyId_to_file1 monitor_ssl_policyId ${policyId}
SecurityPolicy-Monitor-Ssl-00002
[Tags] cn cat
Comment 创建cat
${objectDict} Create Dictionary objectType=fqdn_category isValid=${1} addItemList=*vip.com,*berkeleygroup.co.uk
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
Comment 创建安全策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Monitor-Ssl-00002 policyType=tsg_security policyDesc=autotest action=monitor userRegion={"protocol":"SSL"} referenceObject=${objectId}|TSG_FIELD_SSL_CN isValid=${1} appObjectIdArray=3
log ${policyDict}
${rescode} ${policyId} AddPolicy2 ${1} ${policyDict}
insert_policyId_to_file1 monitor_ssl_objectId1 ${objectId}
insert_policyId_to_file1 monitor_ssl_policyId1 ${policyId}
SecurityPolicy-Monitor-Ssl-00003
[Tags] san cat
Comment 创建cat
${objectDict} Create Dictionary objectType=fqdn_category isValid=${1} addItemList=*pulitzer.org,*nastol.com.ua
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
Comment 创建安全策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Monitor-Ssl-00003 policyType=tsg_security policyDesc=autotest action=monitor userRegion={"protocol":"SSL"} referenceObject=${objectId}|TSG_FIELD_SSL_SAN isValid=${1} appObjectIdArray=3
log ${policyDict}
${rescode} ${policyId} AddPolicy2 ${1} ${policyDict}
insert_policyId_to_file1 monitor_ssl_objectId2 ${objectId}
insert_policyId_to_file1 monitor_ssl_policyId2 ${policyId}
SecurityPolicy-Monitor-Ssl-00004
[Tags] 最大组合
Comment 创建fqdn
${objectDict} Create Dictionary objectType=fqdn isValid=${1} addItemList=*mail.ru
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
Comment 创建安全策略
${policyDict} Create Dictionary policyName=SecurityPolicy-Monitor-Ssl-00004 policyType=tsg_security policyDesc=autotest action=monitor userRegion={"protocol":"SSL"} referenceObject=${objectId}|TSG_FIELD_SSL_SAN,${objectId}|TSG_FIELD_SSL_SNI,${objectId}|TSG_FIELD_SSL_CN isValid=${1} appObjectIdArray=3
log ${policyDict}
${rescode} ${policyId} AddPolicy2 ${1} ${policyDict}
insert_policyId_to_file1 monitor_ssl_objectId3 ${objectId}
insert_policyId_to_file1 monitor_ssl_policyId3 ${policyId}

View File

@@ -0,0 +1,101 @@
*** Settings ***
Force Tags tsg_adc_wp security_policy adc_verify
Library OperatingSystem
Resource ../../../02-Keyword/tsg_adc/SystemCommand.robot
Resource ../../../02-Keyword/tsg_bfapi/PolicyObject.robot
Resource ../../../02-Keyword/tsg_bfapi/LogVariable.robot
Resource ../../../02-Keyword/tsg_adc/FileOperation.robot
*** Test Cases ***
SecurityPolicy-Monitor-Dns-00001
[Tags] fqdn
Comment 功能端验证HTTP验证
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d www.facebook.com
... ELSE set variable nslookup www.facebook.com
${stringlist} run keyword if '${systemType}'=='Windows' Create List 超时
... ELSE Create List canonical name = www.facebook.com
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${rescode} SystemCommands ${commandstr} ${stringlist}
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_dns_starttime ${starttime} monitor_dns_endtime ${endtime}
Comment 功能端验证HTTP验证
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d ok.ru
... ELSE set variable nslookup ok.ru
${stringlist} run keyword if '${systemType}'=='Windows' Create List 超时
... ELSE Create List canonical name = ok.ru
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${rescode} SystemCommands ${commandstr} ${stringlist}
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_dns_starttime1 ${starttime} monitor_dns_endtime1 ${endtime}
SecurityPolicy-Monitor-Dns-00002
[Tags] cat
Comment 功能端验证HTTP验证
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d www.yhd.com
... ELSE set variable nslookup -debug -query=A \ www.yhd.com
${stringlist} run keyword if '${systemType}'=='Windows' Create List 192.168.41.186 www.jd.com ttl = 500
... ELSE Create List 192.168.41.186 www.jd.com ttl = 500
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${rescode} SystemCommands ${commandstr} ${stringlist}
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_dns_starttime2 ${starttime} monitor_dns_endtime2 ${endtime}
Comment 功能端验证HTTP验证
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d www.vk.com
... ELSE set variable nslookup -debug -query=A \ www.vk.com
${stringlist} run keyword if '${systemType}'=='Windows' Create List 192.168.41.186 www.jd.com ttl = 500
... ELSE Create List 192.168.41.186 www.jd.com ttl = 500
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${rescode} SystemCommands ${commandstr} ${stringlist}
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_dns_starttime3 ${starttime} monitor_dns_endtime3 ${endtime}
SecurityPolicy-Monitor-Dns-00003
[Tags] cat
Comment 功能端验证HTTP验证
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d ya.ru
... ELSE set variable nslookup -debug -query=AAAA ya.ru
${stringlist} run keyword if '${systemType}'=='Windows' Create List fc00::2:11 www.taobao.com ttl = 400
... ELSE Create List fc00::2:11 www.taobao.com ttl = 400
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${rescode} SystemCommands ${commandstr} ${stringlist}
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_dns_starttime4 ${starttime} monitor_dns_endtime4 ${endtime}
Comment 功能端验证HTTP验证
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d ya.ru
... ELSE set variable nslookup -debug -query=AAAA ya.ru
${stringlist} run keyword if '${systemType}'=='Windows' Create List fc00::2:11 www.taobao.com ttl = 400
... ELSE Create List fc00::2:11 www.taobao.com ttl = 400
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${rescode} SystemCommands ${commandstr} ${stringlist}
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_dns_starttime5 ${starttime} monitor_dns_endtime5 ${endtime}
SecurityPolicy-Monitor-Dns-00004
[Tags] 最大重定向
Comment 功能端验证HTTP验证
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d www.youtube.com
... ELSE set variable nslookup -debug -query=A www.youtube.com
${stringlist} run keyword if '${systemType}'=='Windows' Create List 192.168.40.110 www.facebook.com ttl = 400 www.ok.ru fc00::2:22
... ELSE Create List 192.168.40.110 www.ok.ru ttl = 400
${commandstr} run keyword if '${systemType}'=='Windows' set variable nslookup -d www.youtube.com
... ELSE set variable nslookup -debug -query=AAAA www.youtube.com
${stringlist} run keyword if '${systemType}'=='Windows' Create List fc00::2:22 www.facebook.com ttl = 400 www.ok.ru 192.168.40.110
... ELSE Create List ttl = 400 www.facebook.com fc00::2:22
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${rescode} SystemCommands ${commandstr} ${stringlist}
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_dns_starttime6 ${starttime} monitor_dns_endtime6 ${endtime}

View File

@@ -0,0 +1,53 @@
*** Settings ***
Force Tags tsg_adc_wp security_policy adc_verify
Library OperatingSystem
Resource ../../../02-Keyword/tsg_adc/SystemCommand.robot
Resource ../../../02-Keyword/tsg_bfapi/PolicyObject.robot
Resource ../../../02-Keyword/tsg_bfapi/LogVariable.robot
Resource ../../../02-Keyword/tsg_adc/FileOperation.robot
Library Custometest
*** Test Cases ***
SecurityPolicy-Monitor-Ftp-00001
[Tags] 子串匹配
Comment 功能端验证
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${FTP} FTP_login ftp://192.168.100.5/123456.txt -u"ftp_user:qazXSW@edc" завезенными
should contain ${FTP} ftp_fail
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_ftp_starttime ${starttime} monitor_ftp_endtime ${endtime}
SecurityPolicy-Monitor-Ftp-00002
[Tags] 右匹配
Comment 功能端验证
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${FTP} FTP_login ftp://192.168.100.5/test.txt -u"ftp_user:qazXSW@edc" 中文test
should contain ${FTP} ftp_fail
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_ftp_starttime1 ${starttime} monitor_ftp_endtime1 ${endtime}
SecurityPolicy-Monitor-Ftp-00003
[Tags] 完整匹配
Comment 功能端验证
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${FTP} FTP_login ftp://192.168.100.5/wlcsy.txt -u"ftp_user:qazXSW@edc" 中文文件内容
should contain ${FTP} ftp_fail
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_ftp_starttime2 ${starttime} monitor_ftp_endtime2 ${endtime}
SecurityPolicy-Monitor-Ftp-00004
[Tags] 左匹配
Comment 功能端验证
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${FTP} FTP_login ftp://192.168.100.5/aewn.txt -u"ftp_user:qazXSW@edc" завезенными
should contain ${FTP} ftp_fail
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_ftp_starttime3 ${starttime} monitor_ftp_endtime3 ${endtime}

View File

@@ -0,0 +1,97 @@
*** Settings ***
Force Tags tsg_adc_wp security_policy adc_verify
Library OperatingSystem
Resource ../../../02-Keyword/tsg_adc/SystemCommand.robot
Resource ../../../02-Keyword/tsg_bfapi/PolicyObject.robot
Resource ../../../02-Keyword/tsg_bfapi/LogVariable.robot
Resource ../../../02-Keyword/tsg_adc/FileOperation.robot
*** Test Cases ***
SecurityPolicy-Monitor-Ssl-00001
[Tags] sni
Comment 功能端验证HTTP验证
${commandstr} run keyword if '${systemType}'=='Windows' set variable ${curlbatpath}/command/SecurityPolicy_Deny_SSL_00001.bat
... ELSE set variable curl https://www.freestockimages.ru/
${stringlist} run keyword if '${systemType}'=='Windows' Create List Connection was reset
... ELSE Create List Connection reset by peer
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${rescode} SystemCommands ${commandstr} ${stringlist}
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_ssl_starttime ${starttime} monitor_ssl_endtime ${endtime}
Comment 功能端验证HTTP验证
${commandstr} run keyword if '${systemType}'=='Windows' set variable ${curlbatpath}/command/SecurityPolicy_Deny_SSL_00001_1.bat
... ELSE set variable curl \ \ \ https://www.cxwl.com/
${stringlist} run keyword if '${systemType}'=='Windows' Create List Connection was reset
... ELSE Create List Connection reset by peer
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${rescode} SystemCommands ${commandstr} ${stringlist}
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_ssl_starttime1 ${starttime} monitor_ssl_endtime1 ${endtime}
SecurityPolicy-Monitor-Ssl-00002
[Tags] cn
Comment 功能端验证HTTP验证
${commandstr} run keyword if '${systemType}'=='Windows' set variable ${curlbatpath}/command/SecurityPolicy_Deny_SSL_00002.bat
... ELSE set variable curl https://www.berkeleygroup.co.uk/
${stringlist} run keyword if '${systemType}'=='Windows' Create List Connection was reset
... ELSE Create List Connection reset by peer
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${rescode} SystemCommands ${commandstr} ${stringlist}
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_ssl_starttime2 ${starttime} monitor_ssl_endtime2 ${endtime}
Comment 功能端验证HTTP验证
${commandstr} run keyword if '${systemType}'=='Windows' set variable ${curlbatpath}/command/SecurityPolicy_Deny_SSL_00002_2.bat
... ELSE set variable curl https://www.vip.com/
${stringlist} run keyword if '${systemType}'=='Windows' Create List Connection was reset
... ELSE Create List Connection reset by peer
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${rescode} SystemCommands ${commandstr} ${stringlist}
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_ssl_starttime3 ${starttime} monitor_ssl_endtime3 ${endtime}
SecurityPolicy-Monitor-Ssl-00003
[Tags] san
Comment 功能端验证HTTP验证
${commandstr} run keyword if '${systemType}'=='Windows' set variable ${curlbatpath}/command/SecurityPolicy_Deny_SSL_00003.bat
... ELSE set variable curl https://www.nastol.com.ua/
${stringlist} run keyword if '${systemType}'=='Windows' Create List Connection was reset
... ELSE Create List Connection reset by peer
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${rescode} SystemCommands ${commandstr} ${stringlist}
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_ssl_starttime4 ${starttime} monitor_ssl_endtime4 ${endtime}
Comment 功能端验证HTTP验证
${commandstr} run keyword if '${systemType}'=='Windows' set variable ${curlbatpath}/command/SecurityPolicy_Deny_SSL_00003_3.bat
... ELSE set variable curl https://www.pulitzer.org/
${stringlist} run keyword if '${systemType}'=='Windows' Create List Connection was reset
... ELSE Create List Connection reset by peer
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${rescode} SystemCommands ${commandstr} ${stringlist}
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_ssl_starttime5 ${starttime} monitor_ssl_endtime5 ${endtime}
SecurityPolicy-Monitor-Ssl-00004
[Tags] 最大组合
Comment 功能端验证HTTP验证
${commandstr} run keyword if '${systemType}'=='Windows' set variable ${curlbatpath}/command/SecurityPolicy_Deny_SSL_00004.bat
... ELSE set variable curl https://mail.ru/
${stringlist} run keyword if '${systemType}'=='Windows' Create List Connection was reset
... ELSE Create List Connection reset by peer
${starttime} Get Time
Sleep ${policyVerificationSleepSeconds}s
${rescode} SystemCommands ${commandstr} ${stringlist}
Sleep ${policyLogVerificationSleepSeconds}s
${endtime} Get Time
insert_time_to_file1 monitor_ssl_starttime6 ${starttime} monitor_ssl_endtime6 ${endtime}

View File

@@ -0,0 +1,53 @@
*** Settings ***
Test Teardown DeletePolicyAndObject ${policyIds} ${objectids}
Force Tags tsg_adc_wp adc_log security_policy
Library OperatingSystem
Resource ../../../02-Keyword/tsg_adc/SystemCommand.robot
Resource ../../../02-Keyword/tsg_bfapi/PolicyObject.robot
Resource ../../../02-Keyword/tsg_bfapi/LogVariable.robot
Resource ../../../05-Other/AllFlowCaseVariable.txt
Resource ../../../02-Keyword/tsg_adc/FileOperation.robot
Resource ../../../05-Other/AllFlowCaseVariable1.txt
*** Variables ***
${policyIds} ${EMPTY}
${objectids} ${EMPTY}
*** Test Cases ***
SecurityPolicy-Monitor-Dns-00001
[Tags] sni
#删除对象
${objectids} set Variable ${monitor_dns_objectId}
#删除策略
${policyIds} Create List {"policyType":"tsg_security","policyIds":[${monitor_dns_policyId}]}
${s} Convert to String ${monitor_dns_policyId}
GetLogList security_event_log ${monitor_dns_starttime} ${monitor_dns_endtime} ${testClentIP} ${s} dns_qname facebook.com
GetLogList security_event_log ${monitor_dns_starttime1} ${monitor_dns_endtime1} ${testClentIP} ${s} dns_qname ok.ru
SecurityPolicy-Monitor-Dns-00002
[Tags] cn
#删除对象
${objectids} set Variable ${monitor_dns_objectId1}
#删除策略
${policyIds} Create List {"policyType":"tsg_security","policyIds":[${monitor_dns_policyId1}]}
${s} Convert to String ${monitor_dns_policyId1}
GetLogList security_event_log ${monitor_dns_starttime2} ${monitor_dns_endtime2} ${testClentIP} ${s} dns_qname yhd.com
GetLogList security_event_log ${monitor_dns_starttime3} ${monitor_dns_endtime3} ${testClentIP} ${s} dns_qname vk.com
SecurityPolicy-Monitor-Dns-00003
[Tags] san
#删除对象
${objectids} set Variable ${monitor_dns_objectId2}
#删除策略
${policyIds} Create List {"policyType":"tsg_security","policyIds":[${monitor_dns_policyId2}]}
${s} Convert to String ${monitor_dns_policyId2}
GetLogList security_event_log ${monitor_dns_starttime4} ${monitor_dns_endtime4} ${testClentIP} ${s} dns_qname ya.ru
SecurityPolicy-Monitor-Dns-00004
[Tags] 最大组合
#删除对象
${objectids} set Variable ${monitor_dns_objectId3}
#删除策略
${policyIds} Create List {"policyType":"tsg_security","policyIds":[${monitor_dns_policyId3}]}
${s} Convert to String ${monitor_dns_policyId3}
GetLogList security_event_log ${monitor_dns_starttime6} ${monitor_dns_endtime6} ${testClentIP} ${s} dns_qname youtube.com

View File

@@ -0,0 +1,59 @@
*** Settings ***
Test Teardown DeletePolicyAndObject ${policyIds} ${objectids}
Force Tags tsg_adc_wp adc_log security_policy
Library OperatingSystem
Resource ../../../02-Keyword/tsg_adc/SystemCommand.robot
Resource ../../../02-Keyword/tsg_bfapi/PolicyObject.robot
Resource ../../../02-Keyword/tsg_bfapi/LogVariable.robot
Resource ../../../05-Other/AllFlowCaseVariable.txt
Resource ../../../02-Keyword/tsg_adc/FileOperation.robot
Resource ../../../05-Other/AllFlowCaseVariable1.txt
*** Variables ***
${policyIds} ${EMPTY}
${objectids} ${EMPTY}
*** Test Cases ***
SecurityPolicy-Monitor-ftp-00001
[Tags] 字串匹配
#删除对象
${objectids} set Variable ${monitor_ftp_objectId}
${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_ftp_objectId1}
${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_ftp_objectId2}
#删除策略
${policyIds} Create List {"policyType":"tsg_security","policyIds":[${monitor_ftp_policyId}]}
${s} Convert to String ${monitor_ftp_policyId}
GetLogList security_event_log ${monitor_ftp_starttime} ${monitor_ftp_endtime} ${testClentIP} ${s} ftp_account ftp_user
SecurityPolicy-Monitor-ftp-00002
[Tags] 右匹配
#删除对象
${objectids} set Variable ${monitor_ftp_objectId3}
${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_ftp_objectId4}
${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_ftp_objectId5}
#删除策略
${policyIds} Create List {"policyType":"tsg_security","policyIds":[${monitor_ftp_policyId1}]}
${s} Convert to String ${monitor_ftp_policyId1}
GetLogList security_event_log ${monitor_ftp_starttime1} ${monitor_ftp_endtime1} ${testClentIP} ${s} ftp_account ftp_user
SecurityPolicy-Monitor-ftp-00003
[Tags] 完整匹配
#删除对象
${objectids} set Variable ${monitor_ftp_objectId6}
${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_ftp_objectId7}
${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_ftp_objectId8}
#删除策略
${policyIds} Create List {"policyType":"tsg_security","policyIds":[${monitor_ftp_policyId2}]}
${s} Convert to String ${monitor_ftp_policyId2}
GetLogList security_event_log ${monitor_ftp_starttime2} ${monitor_ftp_endtime2} ${testClentIP} ${s} ftp_account ftp_user
SecurityPolicy-Monitor-ftp-00004
[Tags] 左匹配
#删除对象
${objectids} set Variable ${monitor_ftp_objectId9}
${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_ftp_objectId10}
${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_ftp_objectId11}
#删除策略
${policyIds} Create List {"policyType":"tsg_security","policyIds":[${monitor_ftp_policyId3}]}
${s} Convert to String ${monitor_ftp_policyId3}
GetLogList security_event_log ${monitor_ftp_starttime3} ${monitor_ftp_endtime3} ${testClentIP} ${s} ftp_account ftp_user

View File

@@ -0,0 +1,54 @@
*** Settings ***
Test Teardown DeletePolicyAndObject ${policyIds} ${objectids}
Force Tags tsg_adc_wp adc_log security_policy
Library OperatingSystem
Resource ../../../02-Keyword/tsg_adc/SystemCommand.robot
Resource ../../../02-Keyword/tsg_bfapi/PolicyObject.robot
Resource ../../../02-Keyword/tsg_bfapi/LogVariable.robot
Resource ../../../05-Other/AllFlowCaseVariable.txt
Resource ../../../02-Keyword/tsg_adc/FileOperation.robot
Resource ../../../05-Other/AllFlowCaseVariable1.txt
*** Variables ***
${policyIds} ${EMPTY}
${objectids} ${EMPTY}
*** Test Cases ***
SecurityPolicy-Monitor-Ssl-00001
[Tags] sni
#删除对象
${objectids} set Variable ${monitor_ssl_objectId}
#删除策略
${policyIds} Create List {"policyType":"tsg_security","policyIds":[${monitor_ssl_policyId}]}
${s} Convert to String ${monitor_ssl_policyId}
GetLogList security_event_log ${monitor_ssl_starttime} ${monitor_ssl_endtime} ${testClentIP} ${s} ssl_sni freestockimages.ru
GetLogList security_event_log ${monitor_ssl_starttime1} ${monitor_ssl_endtime1} ${testClentIP} ${s} ssl_sni cxwl.com
SecurityPolicy-Monitor-Ssl-00002
[Tags] cn
#删除对象
${objectids} set Variable ${monitor_ssl_objectId1}
#删除策略
${policyIds} Create List {"policyType":"tsg_security","policyIds":[${monitor_ssl_policyId1}]}
${s} Convert to String ${monitor_ssl_policyId1}
GetLogList security_event_log ${monitor_ssl_starttime2} ${monitor_ssl_endtime2} ${testClentIP} ${s} ssl_sni berkeleygroup.co.uk
GetLogList security_event_log ${monitor_ssl_starttime3} ${monitor_ssl_endtime3} ${testClentIP} ${s} ssl_sni vip.com
SecurityPolicy-Monitor-Ssl-00003
[Tags] san
#删除对象
${objectids} set Variable ${monitor_ssl_objectId2}
#删除策略
${policyIds} Create List {"policyType":"tsg_security","policyIds":[${monitor_ssl_policyId2}]}
${s} Convert to String ${monitor_ssl_policyId2}
GetLogList security_event_log ${monitor_ssl_starttime4} ${monitor_ssl_endtime4} ${testClentIP} ${s} ssl_sni nastol.com.ua
GetLogList security_event_log ${monitor_ssl_starttime5} ${monitor_ssl_endtime5} ${testClentIP} ${s} ssl_sni pulitzer.org
SecurityPolicy-Monitor-Ssl-00004
[Tags] 最大组合
#删除对象
${objectids} set Variable ${monitor_ssl_objectId3}
#删除策略
${policyIds} Create List {"policyType":"tsg_security","policyIds":[${monitor_ssl_policyId3}]}
${s} Convert to String ${monitor_ssl_policyId3}
GetLogList security_event_log ${monitor_ssl_starttime6} ${monitor_ssl_endtime6} ${testClentIP} ${s} ssl_sni mail.ru