提交安全策略用例优化

This commit is contained in:
lyf
2021-03-22 18:24:26 +08:00
parent 0bbcdae766
commit bb4717b09f
15 changed files with 625 additions and 623 deletions

View File

@@ -14,21 +14,21 @@ SecurityAllowSSL001
[Tags] Allow SSL SNI
#新建对象fqdn
Comment 新建对象fqdn
CreatePage FQDN single ${TEST NAME}_FQDN keywordtext=$www.facebook.com
CreatePage FQDN single ${TEST NAME}${tag}_FQDN keywordtext=$www.facebook.com
${sip1} Create Dictionary Sordtype=Source Type1=Ip CreateOrSearch=Create Add=Address Name=${TEST NAME}_IP1 Ipclienttext1=192.168.50.17 Port=1-65535
${sip1} Create Dictionary Sordtype=Source Type1=Ip CreateOrSearch=Create Add=Address Name=${TEST NAME}${tag}_IP1 Ipclienttext1=192.168.50.17 Port=1-65535
${sourceAddIpList} Create List ${sip1}
${sourceInfo} Create Dictionary sourceAddIpList=${sourceAddIpList}
${sniname} create list ${TEST NAME}_FQDN
${sniname} create list ${TEST NAME}${tag}_FQDN
${filter} create list SNI
${filterInfo} Create Dictionary Filter=${filter} SSLSNIname=${sniname}
${policyInfo} Create Dictionary PolicyType=Security Policy CreateorEdit=Create PolicyName=${TEST NAME} PolicyAction=Allow ApplicationSearch=SSL PolicyLogSession=1 PolicyEnabled=1
${policyInfo} Create Dictionary PolicyType=Security Policy CreateorEdit=Create PolicyName=${TEST NAME}${tag} PolicyAction=Allow ApplicationSearch=SSL PolicyLogSession=1 PolicyEnabled=1
UIPolicies ${policyInfo} SourceInfo=${sourceInfo} FilterInfo=${filterInfo}
@@ -38,21 +38,21 @@ SecurityAllowSSL002
[Tags] Allow SSL SNI
#新建对象fqdn
Comment 新建对象fqdn
CreatePage FQDN single ${TEST NAME}_FQDN keywordtext=*youtube.com
CreatePage FQDN single ${TEST NAME}${tag}_FQDN keywordtext=*youtube.com
${sip1} Create Dictionary Sordtype=Source Type1=Ip CreateOrSearch=Create Add=Address Name=${TEST NAME}_IP1 Ipclienttext1=192.168.50.17 Port=1-65535
${sip1} Create Dictionary Sordtype=Source Type1=Ip CreateOrSearch=Create Add=Address Name=${TEST NAME}${tag}_IP1 Ipclienttext1=192.168.50.17 Port=1-65535
${sourceAddIpList} Create List ${sip1}
${sourceInfo} Create Dictionary sourceAddIpList=${sourceAddIpList}
${sniname} create list ${TEST NAME}_FQDN
${sniname} create list ${TEST NAME}${tag}_FQDN
${filter} create list SNI
${filterInfo} Create Dictionary Filter=${filter} SSLSNIname=${sniname}
${policyInfo} Create Dictionary PolicyType=Security Policy CreateorEdit=Create PolicyName=${TEST NAME} PolicyAction=Allow ApplicationSearch=SSL PolicyLogSession=1 PolicyEnabled=1
${policyInfo} Create Dictionary PolicyType=Security Policy CreateorEdit=Create PolicyName=${TEST NAME}${tag} PolicyAction=Allow ApplicationSearch=SSL PolicyLogSession=1 PolicyEnabled=1
UIPolicies ${policyInfo} SourceInfo=${sourceInfo} FilterInfo=${filterInfo}
@@ -62,25 +62,25 @@ SecurityAllowSSL003
[Tags] Allow SSL SNI
#新建对象fqdn
Comment 新建对象fqdn
CreatePage FQDN single ${TEST NAME}_FQDN1 keywordtext=$twitter.com
CreatePage FQDN single ${TEST NAME}${tag}_FQDN1 keywordtext=$twitter.com
#新建对象fqdn
Comment 新建对象fqdn
CreatePage FQDN single ${TEST NAME}_FQDN2 keywordtext=*.com
CreatePage FQDN single ${TEST NAME}${tag}_FQDN2 keywordtext=*.com
${sip1} Create Dictionary Sordtype=Source Type1=Ip CreateOrSearch=Create Add=Address Name=${TEST NAME}_IP1 Ipclienttext1=192.168.50.17 Port=1-65535
${sip1} Create Dictionary Sordtype=Source Type1=Ip CreateOrSearch=Create Add=Address Name=${TEST NAME}${tag}_IP1 Ipclienttext1=192.168.50.17 Port=1-65535
${sourceAddIpList} Create List ${sip1}
${sourceInfo} Create Dictionary sourceAddIpList=${sourceAddIpList}
${sniname} create list ${TEST NAME}_FQDN1 ${TEST NAME}_FQDN2
${sniname} create list ${TEST NAME}${tag}_FQDN1 ${TEST NAME}${tag}_FQDN2
${filter} create list SNI
${filterInfo} Create Dictionary Filter=${filter} SSLSNIname=${sniname}
${policyInfo} Create Dictionary PolicyType=Security Policy CreateorEdit=Create PolicyName=${TEST NAME} PolicyAction=Allow ApplicationSearch=SSL PolicyLogSession=1 PolicyEnabled=1
${policyInfo} Create Dictionary PolicyType=Security Policy CreateorEdit=Create PolicyName=${TEST NAME}${tag} PolicyAction=Allow ApplicationSearch=SSL PolicyLogSession=1 PolicyEnabled=1
UIPolicies ${policyInfo} SourceInfo=${sourceInfo} FilterInfo=${filterInfo}
@@ -91,7 +91,7 @@ SecurityAllowSSL003
SecurityAllowSSL005
[Tags] Allow SSL Category
${sip1} Create Dictionary Sordtype=Source Type1=Ip CreateOrSearch=Create Add=Address Name=${TEST NAME}_IP1 Ipclienttext1=192.168.50.17 Port=1-65535
${sip1} Create Dictionary Sordtype=Source Type1=Ip CreateOrSearch=Create Add=Address Name=${TEST NAME}${tag}_IP1 Ipclienttext1=192.168.50.17 Port=1-65535
${sourceAddIpList} Create List ${sip1}
@@ -103,7 +103,7 @@ SecurityAllowSSL005
${filterInfo} Create Dictionary Filter=${filter} SSLSNIname=${sniname} Hosttype=Category
${policyInfo} Create Dictionary PolicyType=Security Policy CreateorEdit=Create PolicyName=${TEST NAME} PolicyAction=Allow ApplicationSearch=SSL PolicyLogSession=1 PolicyEnabled=1
${policyInfo} Create Dictionary PolicyType=Security Policy CreateorEdit=Create PolicyName=${TEST NAME}${tag} PolicyAction=Allow ApplicationSearch=SSL PolicyLogSession=1 PolicyEnabled=1
UIPolicies ${policyInfo} SourceInfo=${sourceInfo} FilterInfo=${filterInfo}
@@ -112,15 +112,15 @@ SecurityAllowSSL006
[Tags] Allow SSL FQDN
#新建对象fqdn
Comment 新建对象fqdn
CreatePage FQDN single ${TEST NAME}_FQDN keywordtext=$mail.ru
CreatePage FQDN single ${TEST NAME}${tag}_FQDN keywordtext=$mail.ru
${sniname} create list ${TEST NAME}_FQDN
${sniname} create list ${TEST NAME}${tag}_FQDN
${filter} create list SNI
${filterInfo} Create Dictionary Filter=${filter} SSLSNIname=${sniname}
${policyInfo} Create Dictionary PolicyType=Security Policy CreateorEdit=Create PolicyName=${TEST NAME} PolicyAction=Allow ApplicationSearch=SSL PolicyLogSession=1 PolicyEnabled=1
${policyInfo} Create Dictionary PolicyType=Security Policy CreateorEdit=Create PolicyName=${TEST NAME}${tag} PolicyAction=Allow ApplicationSearch=SSL PolicyLogSession=1 PolicyEnabled=1
UIPolicies ${policyInfo} FilterInfo=${filterInfo}