提交:1、新增安全策略用例2、修改安全策略关键字3、提交离开提示关键字

This commit is contained in:
lyf
2021-01-27 18:44:48 +08:00
parent f6c5ee22c8
commit aa54070c8b
3 changed files with 148 additions and 14 deletions

View File

@@ -153,7 +153,7 @@ SecurityPolicy-Deny-HTTP-Host-Block403ProfileCreate
Create-Application-Button
ApplicationSearch HTTP
Create-Filter-judge Application=HTTP Filter=${filter} Hostname=${hostname}
Deny-subaction action=deny subaction=Block code=403 SearchorCreate=Create ProfileName=zdhprofilehtml file=${path}response_pages_files\\Create-ResponsePages-test.html
Deny-subaction action=deny subaction=Block code=403 Content=Profile SearchorCreate=Create ProfileName=zdhprofilehtml file=${path}response_pages_files\\Create-ResponsePages-test.html
LogSession 1
Enabled open
Security-Policies-OK
@@ -177,7 +177,7 @@ SecurityPolicy-Deny-HTTP-Host-Block403ProfileSearch
Create-Application-Button
ApplicationSearch HTTP
Create-Filter-judge Application=HTTP Filter=${filter} Hostname=${hostname}
Deny-subaction action=deny subaction=Block code=403 SearchorCreate=Search ProfileName=zdhprofilehtml
Deny-subaction action=deny subaction=Block code=403 Content=Profile SearchorCreate=Search ProfileName=zdhprofilehtml
LogSession 1
Enabled open
Security-Policies-OK
@@ -225,7 +225,7 @@ SecurityPolicy-Deny-HTTP-Host-Block404ProfileCreate
Create-Application-Button
ApplicationSearch HTTP
Create-Filter-judge Application=HTTP Filter=${filter} Hostname=${hostname}
Deny-subaction action=deny subaction=Block code=404 SearchorCreate=Create ProfileName=zdhprofilehtml file=${path}response_pages_files\\Create-ResponsePages-test.html
Deny-subaction action=deny subaction=Block code=404 Content=Profile SearchorCreate=Create ProfileName=zdhprofilehtml file=${path}response_pages_files\\Create-ResponsePages-test.html
LogSession 1
Enabled open
Security-Policies-OK
@@ -249,8 +249,108 @@ SecurityPolicy-Deny-HTTP-Host-Block404ProfileSearch
Create-Application-Button
ApplicationSearch HTTP
Create-Filter-judge Application=HTTP Filter=${filter} Hostname=${hostname}
Deny-subaction action=deny subaction=Block code=404 SearchorCreate=Search ProfileName=zdhprofilehtml
Deny-subaction action=deny subaction=Block code=404 Content=Profile SearchorCreate=Search ProfileName=zdhprofilehtml
LogSession 1
Enabled open
Security-Policies-OK
SecurityPolicy-Deny-HTTP-Host-Alert200TEXT
#新建对象fqdn
Comment 新建对象fqdn
CreatePage FQDN single zdhfqdn keywordtext=*www.baidu.com
#新建策略
Comment 新建策略
Menu policys Security Policy
SecurityPolicy.CreateButton
SecurityPolicy.Create-name SecurityPolicy-Deny-HTTP-MaxCombination
SecurityPolicy.Create-action deny
SecurityPolicy.Create-Source-Button
SecurityPolicy.Create-Source type1=Ip CreateOrSearch=Create Add=Address name=zdhip001 ipclienttext1=192.168.100.1 post=1
#SecurityPolicy.Create-Destination-Button
#SecurityPolicy.Create-Destination type1=Ip CreateOrSearch=Create Add=Address name=zdhip001 ipclienttext1=192.168.100.1 post=1
${hostname} create list zdhfqdn
${filter} create list Host
Create-Application-Button
ApplicationSearch HTTP
Create-Filter-judge Application=HTTP Filter=${filter} Hostname=${hostname}
Deny-subaction action=deny subaction=Alert code=200 Content=TEXT block-text=123456
LogSession 1
Enabled open
Security-Policies-OK
SecurityPolicy-Deny-HTTP-Host-Alert200ProfileCreate
#新建对象fqdn
Comment 新建对象fqdn
CreatePage FQDN single zdhfqdn keywordtext=*www.baidu.com
#新建策略
Comment 新建策略
Menu policys Security Policy
SecurityPolicy.CreateButton
SecurityPolicy.Create-name SecurityPolicy-Deny-HTTP-MaxCombination
SecurityPolicy.Create-action deny
SecurityPolicy.Create-Source-Button
SecurityPolicy.Create-Source type1=Ip CreateOrSearch=Create Add=Address name=zdhip001 ipclienttext1=192.168.100.1 post=1
#SecurityPolicy.Create-Destination-Button
#SecurityPolicy.Create-Destination type1=Ip CreateOrSearch=Create Add=Address name=zdhip001 ipclienttext1=192.168.100.1 post=1
${hostname} create list zdhfqdn
${filter} create list Host
Create-Application-Button
ApplicationSearch HTTP
Create-Filter-judge Application=HTTP Filter=${filter} Hostname=${hostname}
Deny-subaction action=deny subaction=Alert code=200 Content=Profile SearchorCreate=Create ProfileName=zdhprofilehtml file=${path}response_pages_files\\Create-ResponsePages-test.html
LogSession 1
Enabled open
Security-Policies-OK
SecurityPolicy-Deny-HTTP-Host-Alert200ProfileSearch
#新建对象fqdn
Comment 新建对象fqdn
CreatePage FQDN single zdhfqdn keywordtext=*www.baidu.com
#新建策略
Comment 新建策略
Menu policys Security Policy
SecurityPolicy.CreateButton
SecurityPolicy.Create-name SecurityPolicy-Deny-HTTP-MaxCombination
SecurityPolicy.Create-action deny
SecurityPolicy.Create-Source-Button
SecurityPolicy.Create-Source type1=Ip CreateOrSearch=Create Add=Address name=zdhip001 ipclienttext1=192.168.100.1 post=1
#SecurityPolicy.Create-Destination-Button
#SecurityPolicy.Create-Destination type1=Ip CreateOrSearch=Create Add=Address name=zdhip001 ipclienttext1=192.168.100.1 post=1
${hostname} create list zdhfqdn
${filter} create list Host
Create-Application-Button
ApplicationSearch HTTP
Create-Filter-judge Application=HTTP Filter=${filter} Hostname=${hostname}
Deny-subaction action=deny subaction=Alert code=200 Content=Profile SearchorCreate=Search ProfileName=zdhprofilehtml
LogSession 1
Enabled open
Security-Policies-OK
SecurityPolicy-Deny-HTTP-Host-Alert204
#新建对象fqdn
Comment 新建对象fqdn
CreatePage FQDN single zdhfqdn keywordtext=*www.baidu.com
#新建策略
Comment 新建策略
Menu policys Security Policy
SecurityPolicy.CreateButton
SecurityPolicy.Create-name SecurityPolicy-Deny-HTTP-MaxCombination
SecurityPolicy.Create-action deny
SecurityPolicy.Create-Source-Button
SecurityPolicy.Create-Source type1=Ip CreateOrSearch=Create Add=Address name=zdhip001 ipclienttext1=192.168.100.1 post=1
#SecurityPolicy.Create-Destination-Button
#SecurityPolicy.Create-Destination type1=Ip CreateOrSearch=Create Add=Address name=zdhip001 ipclienttext1=192.168.100.1 post=1
${hostname} create list zdhfqdn
${filter} create list Host
Create-Application-Button
ApplicationSearch HTTP
Create-Filter-judge Application=HTTP Filter=${filter} Hostname=${hostname}
Deny-subaction action=deny subaction=Alert code=204
LogSession 1
Enabled open
Security-Policies-OK