368 lines
18 KiB
Plaintext
368 lines
18 KiB
Plaintext
*** Settings ***
|
|
Test Teardown DeletePolicyAndGroupObject ${policyIds} ${objectIds}
|
|
Resource ../../../02-Keyword/tsg_bfapi/PolicyObject.robot
|
|
Resource ../../../02-Keyword/tsg_bfapi/policy_object/Policy.robot
|
|
Resource ../../../02-Keyword/tsg_bfapi/policy_object/Object.robot
|
|
Resource ../../../02-Keyword/tsg_bfapi/policy_object/Log.robot
|
|
Resource ../../../02-Keyword/tsg_bfapi/Common.robot
|
|
Resource ../../../03-Variable/ApplicationID.txt
|
|
|
|
Library json
|
|
Library DateTime
|
|
*** Variables ***
|
|
${policyIds} ${EMPTY}
|
|
${objectIds} ${EMPTY}
|
|
*** Test Cases ***
|
|
Policy-DefaultDenyDropRST-00001
|
|
[Tags] xj xzw
|
|
#deny drop
|
|
${policy} Create Dictionary policyName=default policy policyType=tsg_security
|
|
... policyDesc=update-autotest deny drop policyId=0
|
|
... action=deny
|
|
... userRegion={"method":"drop"}
|
|
... doLog=0
|
|
... isValid=${1}
|
|
${rescode} UpdatePolicies 1 ${policy} v2 update
|
|
|
|
${policy} Create Dictionary policyName=default policy policyType=tsg_security
|
|
... policyDesc=update-autotest deny rst policyId=0
|
|
... action=deny
|
|
... userRegion={"method":"rst"}
|
|
... doLog=0
|
|
... isValid=${1}
|
|
${rescode} UpdatePolicies 1 ${policy} v2 update
|
|
|
|
${policy} Create Dictionary policyName=default policy policyType=tsg_security
|
|
... policyDesc=update-autotest policyId=0
|
|
... action=allow
|
|
... userRegion={"protocol":""}
|
|
... doLog=0
|
|
... isValid=${1}
|
|
${rescode} UpdatePolicies 1 ${policy} v2 update
|
|
|
|
Policy-DefaultMonitor-00002
|
|
[Tags] xj xzw
|
|
#deny drop
|
|
${policy} Create Dictionary policyName=default policy policyType=tsg_security
|
|
... policyDesc=update-autotest monitor policyId=0
|
|
... action=monitor
|
|
... userRegion={}
|
|
... doLog=0
|
|
... isValid=${1}
|
|
${rescode} UpdatePolicies 1 ${policy} v2 update
|
|
|
|
#恢复
|
|
${policy} Create Dictionary policyName=default policy policyType=tsg_security
|
|
... policyDesc=update-autotest policyId=0
|
|
... action=allow
|
|
... userRegion={}
|
|
... doLog=0
|
|
... isValid=${1}
|
|
${rescode} UpdatePolicies 1 ${policy} v2 update
|
|
|
|
Policy-DefaultIntercept-00002
|
|
[Tags] xj xzw
|
|
${policy} Create Dictionary policyName=default policy policyType=tsg_security
|
|
... policyDesc=update-autotest intercept policyId=0
|
|
... action=intercept
|
|
... userRegion={}
|
|
... doLog=0
|
|
... isValid=${1}
|
|
${rescode} UpdatePolicies 1 ${policy} v2 update
|
|
#恢复
|
|
${policy} Create Dictionary policyName=default policy policyType=tsg_security
|
|
... policyDesc=update-autotest policyId=0
|
|
... action=allow
|
|
... userRegion={}
|
|
... doLog=0
|
|
... isValid=${1}
|
|
${rescode} UpdatePolicies 1 ${policy} v2 update
|
|
|
|
Policy-AllowURL+IP-00003
|
|
[Tags] xj xzw
|
|
${objectIds} Create List
|
|
log ${TEST NAME}
|
|
Comment 创建IP1
|
|
${addItemList1} Create Dictionary isSession=endpoint ip=192.168.41.67-192.168.41.67 port=8080 isInitialize=0
|
|
#可以添加多个
|
|
${addItemList2} Create Dictionary isSession=endpoint ip=192.168.41.68/32 port=0-65535 isInitialize=0
|
|
${addItemList3} Create Dictionary isSession=endpoint ip=192.168.41.69 port=1-65535 isInitialize=0
|
|
${addItemLists} Create list ${addItemList1} ${addItemList2} ${addItemList3}
|
|
#objectList对象
|
|
${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} objectName=${TEST NAME}IP
|
|
${rescode} ${objectId2} AddObjects ${1} ${objectDict}
|
|
#${objectIds} Set Variable ${objectId2}
|
|
Append To List ${objectIds} ${objectId2}
|
|
Log Create IP Object2
|
|
|
|
${addItemList1} Create Dictionary keywordArray=11111.*
|
|
#可以添加多个
|
|
${addItemList2} Create Dictionary keywordArray=Afghanistan.Ab Jalil.*
|
|
${addItemList3} Create Dictionary keywordArray=12.*
|
|
${addItemLists} Create list ${addItemList1} ${addItemList2} ${addItemList3}
|
|
#objectList对象
|
|
${objectDict} Create Dictionary objectType=ip objectSubType=geo_location isValid=${1} addItemList=${addItemLists} objectName=${TEST NAME}GEO
|
|
${rescode} ${objectId1} AddObjects ${1} ${objectDict}
|
|
#${objectIds} Set Variable ${objectId1}
|
|
Append To List ${objectIds} ${objectId1}
|
|
Log Create IP Object1
|
|
|
|
Comment 创建url1
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=*google.com.com objectName=${TEST NAME}URL
|
|
${rescode} ${objectId4} AddObject2 ${1} ${objectDict}
|
|
${objectDict} Create Dictionary objectType=keywords isValid=${1} addItemList=стопо
|
|
${rescode} ${object_Content_Id} AddObject2 ${1} ${objectDict}
|
|
#${objectIds} Set Variable ${objectId4},${objectIds}
|
|
Append To List ${objectIds} ${object_Content_Id}
|
|
Log Create url Object4
|
|
Comment 创建安全策略
|
|
${policy} Create Dictionary policyName=${TEST NAME} policyType=tsg_security
|
|
... policyDesc=${TEST NAME}
|
|
... action=allow effectiveRange={}
|
|
... userRegion={"protocol":"HTTP"}
|
|
... source=${objectId2}|TSG_SECURITY_SOURCE_ADDR,${objectId1}|TSG_SECURITY_SOURCE_LOCATION
|
|
... filterList=${objectId4}|TSG_FIELD_HTTP_URL
|
|
... isValid=${1}
|
|
... appIdObjects=${HTTP_ID}
|
|
${rescode} ${policyIds} AddPolicies 1 ${policy} v2
|
|
Log ${rescode}
|
|
log ${policyIds}
|
|
${ids} Get-Pids ${policyIds}
|
|
|
|
Policy-AllowURL-00004
|
|
[Tags] xj xzw
|
|
${objectIds} Create List
|
|
log ${TEST NAME}
|
|
Comment 创建url1
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=*google.com.com objectName=${TEST NAME}URL
|
|
${rescode} ${objectId4} AddObject2 ${1} ${objectDict}
|
|
#${objectIds} Set Variable ${objectId4}
|
|
Append To List ${objectIds} ${objectId4}
|
|
Log Create url Object4
|
|
Comment 创建安全策略
|
|
${policy} Create Dictionary policyName=${TEST NAME} policyType=tsg_security
|
|
... policyDesc=wx-autotest
|
|
... action=allow effectiveRange={}
|
|
... userRegion={"protocol":"HTTP"}
|
|
... filterList=${objectId4}|TSG_FIELD_HTTP_URL
|
|
... isValid=${1} appIdObjects=${HTTP_ID}
|
|
${rescode} ${policyIds} AddPolicies 1 ${policy} v2
|
|
Log ${rescode}
|
|
|
|
Policy-AllowIP-00005
|
|
[Tags] xj xzw
|
|
${objectIds} Create List
|
|
log ${TEST NAME}
|
|
Comment 创建IP1
|
|
${addItemList1} Create Dictionary isSession=endpoint ip=192.168.41.67-192.168.41.67 port=8080 isInitialize=0
|
|
#可以添加多个
|
|
${addItemList2} Create Dictionary isSession=endpoint ip=192.168.41.68/32 port=0-65535 isInitialize=0
|
|
${addItemList3} Create Dictionary isSession=endpoint ip=192.168.41.69 port=1-65535 isInitialize=0
|
|
${addItemLists} Create list ${addItemList1} ${addItemList2} ${addItemList3}
|
|
#objectList对象
|
|
${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} objectName=${TEST NAME}IP
|
|
${rescode} ${objectId2} AddObjects ${1} ${objectDict}
|
|
#${objectIds} Set Variable ${objectId2}
|
|
Append To List ${objectIds} ${objectId2}
|
|
Log Create IP Object2
|
|
Comment 创建安全策略
|
|
${policy} Create Dictionary policyName=${TEST NAME} policyType=tsg_security
|
|
... policyDesc=wx-autotest
|
|
... action=allow effectiveRange={}
|
|
... userRegion={}
|
|
... source=${objectId2}|TSG_SECURITY_SOURCE_ADDR
|
|
... isValid=${1}
|
|
${rescode} ${policyIds} AddPolicies 1 ${policy} v2
|
|
Log ${rescode}
|
|
|
|
Policy-AllowDestinationIP-00006
|
|
[Tags] xj xzw
|
|
${objectIds} Create List
|
|
log ${TEST NAME}
|
|
Comment 创建IP1
|
|
${addItemList1} Create Dictionary isSession=endpoint ip=a1::b1 port=8080 isInitialize=0
|
|
#可以添加多个
|
|
${addItemList2} Create Dictionary isSession=endpoint ip=a2::f2/32 port=0-65535 isInitialize=0
|
|
${addItemList3} Create Dictionary isSession=endpoint ip=a5::f5 port=1-65535 isInitialize=0
|
|
${addItemLists} Create list ${addItemList1} ${addItemList2} ${addItemList3}
|
|
#objectList对象
|
|
${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} objectName=${TEST NAME}IP
|
|
${rescode} ${objectId2} AddObjects ${1} ${objectDict}
|
|
#${objectIds} Set Variable ${objectId2}
|
|
Append To List ${objectIds} ${objectId2}
|
|
Log Create IP Object2
|
|
Comment 创建安全策略
|
|
${policy} Create Dictionary policyName=${TEST NAME} policyType=tsg_security
|
|
... policyDesc=wx-autotest
|
|
... action=allow effectiveRange={}
|
|
... userRegion={"protocol":"HTTP"}
|
|
... destination=${objectId2}|TSG_SECURITY_DESTINATION_ADDR
|
|
... isValid=${1} appIdObjects=${HTTP_ID}
|
|
${rescode} ${policyIds} AddPolicies 1 ${policy} v2
|
|
Log ${rescode}
|
|
|
|
Policy-DenyDropOnlySDA-00007
|
|
[Tags] xj xzw
|
|
${objectIds} Create List
|
|
log ${TEST NAME}
|
|
Comment 创建IP
|
|
${addItemList1} Create Dictionary isSession=endpoint ip=192.168.41.67-192.168.41.67 port=8080 isInitialize=0
|
|
#可以添加多个
|
|
${addItemList2} Create Dictionary isSession=endpoint ip=192.168.41.68/32 port=0-65535 isInitialize=0
|
|
${addItemList3} Create Dictionary isSession=endpoint ip=192.168.41.69 port=1-65535 isInitialize=0
|
|
${addItemLists} Create list ${addItemList1} ${addItemList2} ${addItemList3}
|
|
#objectList对象
|
|
${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} objectName=${TEST NAME}IP
|
|
${rescode} ${objectId1} AddObjects ${1} ${objectDict}
|
|
#${objectIds} Set Variable ${objectId1}
|
|
Append To List ${objectIds} ${objectId1}
|
|
Log Create IP Object
|
|
${policy} Create Dictionary policyType=tsg_security
|
|
... policyName=${TEST NAME}_OnlySource action=deny doBlacklist=0
|
|
... doLog=1 isValid=1
|
|
... userRegion={"method":"drop"}
|
|
... source=${objectId1}|TSG_SECURITY_SOURCE_ADDR
|
|
|
|
${policy1} Create Dictionary policyType=tsg_security
|
|
... policyName=${TEST NAME}_OnlyDestination action=deny doBlacklist=0
|
|
... doLog=1 isValid=1
|
|
... userRegion={"method":"drop"}
|
|
... destination=${objectId1}|TSG_SECURITY_DESTINATION_ADDR
|
|
|
|
${policy2} Create Dictionary policyType=tsg_security
|
|
... policyName=${TEST NAME}_OnlyAppHttp action=deny doBlacklist=0
|
|
... doLog=1 isValid=1
|
|
... userRegion={"method":"drop","protocol":"http"}
|
|
... appIdObjects=${HTTP_ID}
|
|
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=*google.com.com objectName=${TEST NAME}URL
|
|
${rescode} ${objectId4} AddObject2 ${1} ${objectDict}
|
|
#${objectIds} Set Variable ${objectId4},${objectId1}
|
|
Append To List ${objectIds} ${objectId4}
|
|
${policy3} Create Dictionary policyType=tsg_security
|
|
... policyName=${TEST NAME}_OnlyAppHttp action=deny doBlacklist=0
|
|
... doLog=1 isValid=1
|
|
... userRegion={"method":"drop","protocol":"http"}
|
|
... appIdObjects=${HTTP_ID}
|
|
... filterList=${objectId4}|TSG_FIELD_HTTP_URL
|
|
|
|
${policy4} Create Dictionary policyType=tsg_security
|
|
... policyName=${TEST NAME}_OnlyAppSSL action=deny doBlacklist=0
|
|
... doLog=1 isValid=1
|
|
... userRegion={"method":"drop"}
|
|
... appIdObjects=${HTTP_ID},${DNS_ID},${SSL_ID}
|
|
@{policyList} Create List ${policy} ${policy1} ${policy2} ${policy3} ${policy4}
|
|
${rescode} ${policyIds} AddPolicies 1 ${policyList} v2
|
|
Log ${rescode} ${policyIds} ${objectIds}
|
|
|
|
|
|
Policy-DenyRstOnlySDA-00008
|
|
[Tags] xj xzw
|
|
${objectIds} Create List
|
|
log ${TEST NAME}
|
|
Comment 创建IP
|
|
${addItemList1} Create Dictionary isSession=endpoint ip=a1::b1 port=8080 isInitialize=0
|
|
#可以添加多个
|
|
${addItemList2} Create Dictionary isSession=endpoint ip=a2::f2/128 port=0-65535 isInitialize=0
|
|
${addItemList3} Create Dictionary isSession=endpoint ip=a5::f5 port=1-65535 isInitialize=0
|
|
${addItemLists} Create list ${addItemList1} ${addItemList2} ${addItemList3}
|
|
#objectList对象
|
|
${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} objectName=${TEST NAME}IP
|
|
${rescode} ${objectId1} AddObjects ${1} ${objectDict}
|
|
#${objectIds} Set Variable ${objectId1}
|
|
Append To List ${objectIds} ${objectId1}
|
|
Log Create IP Object
|
|
${policy} Create Dictionary policyType=tsg_security
|
|
... policyName=${TEST NAME}_OnlySource action=deny doBlacklist=0
|
|
... doLog=1 isValid=1
|
|
... userRegion={"method":"rst"}
|
|
... source=${objectId1}|TSG_SECURITY_SOURCE_ADDR
|
|
|
|
${policy1} Create Dictionary policyType=tsg_security
|
|
... policyName=${TEST NAME}_OnlyDestination action=deny doBlacklist=0
|
|
... doLog=1 isValid=1
|
|
... userRegion={"method":"rst"}
|
|
... destination=${objectId1}|TSG_SECURITY_DESTINATION_ADDR
|
|
|
|
${policy2} Create Dictionary policyType=tsg_security
|
|
... policyName=${TEST NAME}_OnlyAppHttp action=deny doBlacklist=0
|
|
... doLog=1 isValid=1
|
|
... userRegion={"method":"rst","protocol":"http"}
|
|
... appIdObjects=${HTTP_ID}
|
|
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=*google.com.com objectName=${TEST NAME}URL
|
|
${rescode} ${objectId4} AddObject2 ${1} ${objectDict}
|
|
#${objectIds} Set Variable ${objectId4},${objectId1}
|
|
Append To List ${objectIds} ${objectId4}
|
|
${policy3} Create Dictionary policyType=tsg_security
|
|
... policyName=${TEST NAME}_OnlyAppHttp action=deny doBlacklist=0
|
|
... doLog=1 isValid=1
|
|
... userRegion={"method":"rst","protocol":"http"}
|
|
... appIdObjects=${HTTP_ID}
|
|
... filterList=${objectId4}|TSG_FIELD_HTTP_URL
|
|
|
|
${policy4} Create Dictionary policyType=tsg_security
|
|
... policyName=${TEST NAME}_OnlyAppSSL action=deny doBlacklist=0
|
|
... doLog=1 isValid=1
|
|
... userRegion={"method":"rst"}
|
|
... appIdObjects=${HTTP_ID},${FTP_ID},${SSL_ID}
|
|
#... appIdObjects=${HTTP_ID},${DNS_ID},${SSL_ID}
|
|
@{policyList} Create List ${policy} ${policy1} ${policy2} ${policy3} ${policy4}
|
|
${rescode} ${policyIds} AddPolicies 1 ${policyList} v2
|
|
Log ${rescode} ${policyIds} ${objectIds}
|
|
|
|
Policy-MonitorOnlySDA-00009
|
|
[Tags] xj xzw
|
|
${objectIds} Create List
|
|
log ${TEST NAME}
|
|
Comment 创建IP
|
|
${addItemList1} Create Dictionary isSession=endpoint ip=192.168.41.67-192.168.41.67 port=8080 isInitialize=0
|
|
#可以添加多个
|
|
${addItemList2} Create Dictionary isSession=endpoint ip=192.168.41.68/32 port=0-65535 isInitialize=0
|
|
${addItemList3} Create Dictionary isSession=endpoint ip=192.168.41.69 port=1-65535 isInitialize=0
|
|
${addItemLists} Create list ${addItemList1} ${addItemList2} ${addItemList3}
|
|
#objectList对象
|
|
${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} objectName=${TEST NAME}IP
|
|
${rescode} ${objectId1} AddObjects ${1} ${objectDict}
|
|
#${objectIds} Set Variable ${objectId1}
|
|
Append To List ${objectIds} ${objectId1}
|
|
Log Create IP Object
|
|
${policy} Create Dictionary policyType=tsg_security
|
|
... policyName=${TEST NAME}_OnlySource action=monitor doBlacklist=0
|
|
... doLog=1 isValid=1
|
|
... userRegion={}
|
|
... source=${objectId1}|TSG_SECURITY_SOURCE_ADDR
|
|
|
|
${policy1} Create Dictionary policyType=tsg_security
|
|
... policyName=${TEST NAME}_OnlyDestination action=monitor doBlacklist=0
|
|
... doLog=1 isValid=1
|
|
... userRegion={}
|
|
... destination=${objectId1}|TSG_SECURITY_DESTINATION_ADDR
|
|
|
|
${policy2} Create Dictionary policyType=tsg_security
|
|
... policyName=${TEST NAME}_OnlyAppHttp action=monitor doBlacklist=0
|
|
... doLog=1 isValid=1
|
|
... userRegion={"protocol":"http"}
|
|
... appIdObjects=${HTTP_ID}
|
|
|
|
${objectDict} Create Dictionary objectType=url isValid=${1} addItemList=*google.com.com objectName=${TEST NAME}URL
|
|
${rescode} ${objectId4} AddObject2 ${1} ${objectDict}
|
|
#${objectIds} Set Variable ${objectId4},${objectId1}
|
|
Append To List ${objectIds} ${objectId4}
|
|
${policy3} Create Dictionary policyType=tsg_security
|
|
... policyName=${TEST NAME}_OnlyAppHttp action=monitor doBlacklist=0
|
|
... doLog=1 isValid=1
|
|
... userRegion={"protocol":"http"}
|
|
... appIdObjects=${HTTP_ID}
|
|
... filterList=${objectId4}|TSG_FIELD_HTTP_URL
|
|
|
|
${policy4} Create Dictionary policyType=tsg_security
|
|
... policyName=${TEST NAME}_OnlyAppSSL action=monitor doBlacklist=0
|
|
... doLog=1 isValid=1
|
|
... userRegion={}
|
|
... appIdObjects=${HTTP_ID},${DNS_ID},${SSL_ID}
|
|
@{policyList} Create List ${policy} ${policy1} ${policy2} ${policy3} ${policy4}
|
|
${rescode} ${policyIds} AddPolicies 1 ${policyList} v2
|
|
Log ${rescode} ${policyIds} ${objectIds}
|
|
log ${policyIds}
|
|
${ids} Get-Pids ${policyIds} |