ADC CLI Commands

appfw-learningsettings

The following operations can be performed on “appfw-learningsettings”:

unset set show

unset appfw learningsettings

Use this command to remove appfw learningsettings settings.Refer to the set appfw learningsettings command for meanings of the arguments.

Synopsis

unset appfw learningsettings [-startURLMinThreshold] [-startURLPercentThreshold] [-cookieConsistencyMinThreshold] [-cookieConsistencyPercentThreshold] [-CSRFtagMinThreshold] [-CSRFtagPercentThreshold] [-fieldConsistencyMinThreshold] [-fieldConsistencyPercentThreshold] [-crossSiteScriptingMinThreshold] [-crossSiteScriptingPercentThreshold] [-SQLInjectionMinThreshold] [-SQLInjectionPercentThreshold] [-fieldFormatMinThreshold] [-fieldFormatPercentThreshold] [-CreditCardNumberMinThreshold] [-CreditCardNumberPercentThreshold] [-ContentTypeMinThreshold] [-ContentTypePercentThreshold] [-XMLWSIMinThreshold] [-XMLWSIPercentThreshold] [-XMLAttachmentMinThreshold] [-XMLAttachmentPercentThreshold] [-fieldFormatAutoDeployGracePeriod] [-SQLInjectionAutoDeployGracePeriod] [-crossSiteScriptingAutoDeployGracePeriod] [-startURLAutoDeployGracePeriod] [-cookieConsistencyAutoDeployGracePeriod] [-CSRFtagAutoDeployGracePeriod] [-fieldConsistencyAutoDeployGracePeriod] [-ContentTypeAutoDeployGracePeriod]

set appfw learningsettings

Configures the application firewall learning settings for the specified profile.

Synopsis

set appfw learningsettings [-startURLMinThreshold ] [-startURLPercentThreshold ] [-cookieConsistencyMinThreshold ] [-cookieConsistencyPercentThreshold ] [-CSRFtagMinThreshold ] [-CSRFtagPercentThreshold ] [-fieldConsistencyMinThreshold ] [-fieldConsistencyPercentThreshold ] [-crossSiteScriptingMinThreshold ] [-crossSiteScriptingPercentThreshold ] [-SQLInjectionMinThreshold ] [-SQLInjectionPercentThreshold ] [-fieldFormatMinThreshold ] [-fieldFormatPercentThreshold ] [-CreditCardNumberMinThreshold ] [-CreditCardNumberPercentThreshold ] [-ContentTypeMinThreshold ] [-ContentTypePercentThreshold ] [-XMLWSIMinThreshold ] [-XMLWSIPercentThreshold ] [-XMLAttachmentMinThreshold ] [-XMLAttachmentPercentThreshold ] [-fieldFormatAutoDeployGracePeriod ] [-SQLInjectionAutoDeployGracePeriod ] [-crossSiteScriptingAutoDeployGracePeriod ] [-startURLAutoDeployGracePeriod ] [-cookieConsistencyAutoDeployGracePeriod ] [-CSRFtagAutoDeployGracePeriod ] [-fieldConsistencyAutoDeployGracePeriod ] [-ContentTypeAutoDeployGracePeriod ]

Arguments

profileName Name of the profile.

startURLMinThreshold Minimum number of application firewall sessions that the learning engine must observe to learn start URLs. Default value: 1 Minimum value: 1

startURLPercentThreshold Minimum percentage of application firewall sessions that must contain a particular start URL pattern for the learning engine to learn that start URL. Default value: 0 Minimum value: 0 Maximum value: 100

cookieConsistencyMinThreshold Minimum number of application firewall sessions that the learning engine must observe to learn cookies. Default value: 1 Minimum value: 1

cookieConsistencyPercentThreshold Minimum percentage of application firewall sessions that must contain a particular cookie pattern for the learning engine to learn that cookie. Default value: 0 Minimum value: 0 Maximum value: 100

CSRFtagMinThreshold Minimum number of application firewall sessions that the learning engine must observe to learn cross-site request forgery (CSRF) tags. Default value: 1 Minimum value: 1

CSRFtagPercentThreshold Minimum percentage of application firewall sessions that must contain a particular CSRF tag for the learning engine to learn that CSRF tag. Default value: 0 Minimum value: 0 Maximum value: 100

fieldConsistencyMinThreshold Minimum number of application firewall sessions that the learning engine must observe to learn field consistency information. Default value: 1 Minimum value: 1

fieldConsistencyPercentThreshold Minimum percentage of application firewall sessions that must contain a particular field consistency pattern for the learning engine to learn that field consistency pattern. Default value: 0 Minimum value: 0 Maximum value: 100

crossSiteScriptingMinThreshold Minimum number of application firewall sessions that the learning engine must observe to learn HTML cross-site scripting patterns. Default value: 1 Minimum value: 1

crossSiteScriptingPercentThreshold Minimum percentage of application firewall sessions that must contain a particular cross-site scripting pattern for the learning engine to learn that cross-site scripting pattern. Default value: 0 Minimum value: 0 Maximum value: 100

SQLInjectionMinThreshold Minimum number of application firewall sessions that the learning engine must observe to learn HTML SQL injection patterns. Default value: 1 Minimum value: 1

SQLInjectionPercentThreshold Minimum percentage of application firewall sessions that must contain a particular HTML SQL injection pattern for the learning engine to learn that HTML SQL injection pattern. Default value: 0 Minimum value: 0 Maximum value: 100

fieldFormatMinThreshold Minimum number of application firewall sessions that the learning engine must observe to learn field formats. Default value: 1 Minimum value: 1

fieldFormatPercentThreshold Minimum percentage of application firewall sessions that must contain a particular web form field pattern for the learning engine to recommend a field format for that form field. Default value: 0 Minimum value: 0 Maximum value: 100

CreditCardNumberMinThreshold Minimum threshold to learn Credit Card information. Default value: 1 Minimum value: 1

CreditCardNumberPercentThreshold Minimum threshold in percent to learn Credit Card information. Default value: 0 Minimum value: 0 Maximum value: 100

ContentTypeMinThreshold Minimum threshold to learn Content Type information. Default value: 1 Minimum value: 1

ContentTypePercentThreshold Minimum threshold in percent to learn Content Type information. Default value: 0 Minimum value: 0 Maximum value: 100

XMLWSIMinThreshold Minimum number of application firewall sessions that the learning engine must observe to learn web services interoperability (WSI) information. Default value: 1 Minimum value: 1

XMLWSIPercentThreshold Minimum percentage of application firewall sessions that must contain a particular pattern for the learning engine to learn a web services interoperability (WSI) pattern. Default value: 0 Minimum value: 0 Maximum value: 100

XMLAttachmentMinThreshold Minimum number of application firewall sessions that the learning engine must observe to learn XML attachment patterns. Default value: 1 Minimum value: 1

XMLAttachmentPercentThreshold Minimum percentage of application firewall sessions that must contain a particular XML attachment pattern for the learning engine to learn that XML attachment pattern. Default value: 0 Minimum value: 0 Maximum value: 100

fieldFormatAutoDeployGracePeriod The number of minutes after the threshold hit alert the learned rule will be deployed Default value: 10080 Minimum value: 5 Maximum value: 43200

SQLInjectionAutoDeployGracePeriod The number of minutes after the threshold hit alert the learned rule will be deployed Default value: 10080 Minimum value: 5 Maximum value: 43200

crossSiteScriptingAutoDeployGracePeriod The number of minutes after the threshold hit alert the learned rule will be deployed Default value: 10080 Minimum value: 5 Maximum value: 43200

startURLAutoDeployGracePeriod The number of minutes after the threshold hit alert the learned rule will be deployed Default value: 10080 Minimum value: 5 Maximum value: 43200

cookieConsistencyAutoDeployGracePeriod The number of minutes after the threshold hit alert the learned rule will be deployed Default value: 10080 Minimum value: 5 Maximum value: 43200

CSRFtagAutoDeployGracePeriod The number of minutes after the threshold hit alert the learned rule will be deployed Default value: 10080 Minimum value: 5 Maximum value: 43200

fieldConsistencyAutoDeployGracePeriod The number of minutes after the threshold hit alert the learned rule will be deployed Default value: 10080 Minimum value: 5 Maximum value: 43200

ContentTypeAutoDeployGracePeriod The number of minutes after the threshold hit alert the learned rule will be deployed Default value: 10080 Minimum value: 5 Maximum value: 43200

show appfw learningsettings

Displays the current application firewall learning settings for the specified profile. If no profile is specified, displays the current application firewall settings for all profiles on the Citrix ADC.

Synopsis

show appfw learningsettings []

Arguments

profileName Name of the profile.

Output

startURLMinThreshold Minimum number of application firewall sessions that the learning engine must observe to learn start URLs.

startURLPercentThreshold Minimum percentage of application firewall sessions that must contain a particular start URL pattern for the learning engine to learn that start URL.

cookieConsistencyMinThreshold Minimum number of application firewall sessions that the learning engine must observe to learn cookies.

cookieConsistencyPercentThreshold Minimum percentage of application firewall sessions that must contain a particular cookie pattern for the learning engine to learn that cookie.

CSRFtagMinThreshold Minimum number of application firewall sessions that the learning engine must observe to learn cross-site request forgery (CSRF) tags.

CSRFtagPercentThreshold Minimum percentage of application firewall sessions that must contain a particular CSRF tag for the learning engine to learn that CSRF tag.

fieldConsistencyMinThreshold Minimum number of application firewall sessions that the learning engine must observe to learn field consistency information.

fieldConsistencyPercentThreshold Minimum percentage of application firewall sessions that must contain a particular field consistency pattern for the learning engine to learn that field consistency pattern.

crossSiteScriptingMinThreshold Minimum number of application firewall sessions that the learning engine must observe to learn HTML cross-site scripting patterns.

crossSiteScriptingPercentThreshold Minimum percentage of application firewall sessions that must contain a particular cross-site scripting pattern for the learning engine to learn that cross-site scripting pattern.

SQLInjectionMinThreshold Minimum number of application firewall sessions that the learning engine must observe to learn HTML SQL injection patterns.

SQLInjectionPercentThreshold Minimum percentage of application firewall sessions that must contain a particular HTML SQL injection pattern for the learning engine to learn that HTML SQL injection pattern.

fieldFormatMinThreshold Minimum number of application firewall sessions that the learning engine must observe to learn field formats.

fieldFormatPercentThreshold Minimum percentage of application firewall sessions that must contain a particular web form field pattern for the learning engine to recommend a field format for that form field.

CreditCardNumberMinThreshold Minimum threshold to learn Credit Card information.

CreditCardNumberPercentThreshold Minimum threshold in percent to learn Credit Card information.

ContentTypeMinThreshold Minimum threshold to learn Content Type information.

ContentTypePercentThreshold Minimum threshold in percent to learn Content Type information.

XMLWSIMinThreshold Minimum threshold to learn XML Web Services Interoperability.

XMLWSIPercentThreshold Minimum threshold (in percent) to learn XML Web Services Interoperability.

XMLAttachmentMinThreshold Minimum threshold to learn XML Attachments.

XMLAttachmentPercentThreshold Minimum threshold (in percent) to learn XML Attachments.

crossSiteScriptingAutoDeployGracePeriod The number of minutes after the threshold hit alert the learned rule will be deployed

SQLInjectionAutoDeployGracePeriod The number of minutes after the threshold hit alert the learned rule will be deployed

fieldFormatAutoDeployGracePeriod The number of minutes after the threshold hit alert the learned rule will be deployed

startURLAutoDeployGracePeriod The number of minutes after the threshold hit alert the learned rule will be deployed

cookieConsistencyAutoDeployGracePeriod The number of minutes after the threshold hit alert the learned rule will be deployed

CSRFtagAutoDeployGracePeriod The number of minutes after the threshold hit alert the learned rule will be deployed

fieldConsistencyAutoDeployGracePeriod The number of minutes after the threshold hit alert the learned rule will be deployed

ContentTypeAutoDeployGracePeriod The number of minutes after the threshold hit alert the learned rule will be deployed

devno count stateflag

appfw-learningsettings