appfw-policy
The following operations can be performed on "appfw-policy":
set appfw policy
Modifies the specified parameters of an application firewall policy.
Arguments
name Name of the policy to modify.
rule Name of the Citrix ADC named rule, or a Citrix ADC expression, that the policy uses to determine whether to filter the connection through the application firewall with the designated profile.
profileName Name of the application firewall profile to use if the policy matches.
comment Any comments to preserve information about the policy for later reference.
logAction Where to log information for connections that match this policy.
Example
set transform policy pol9 -rule "HTTP.REQ.HEADER(\\"header\\").CONTAINS(\\"qh2\\")"
unset appfw policy
Removes the settings of an existing application firewall policy. Attributes for which a default value is available revert to their default values. See the set appfw policy command for a description of the parameters..Refer to the set appfw policy command for meanings of the arguments.
Example
unset transform policy pol9 -undefAction
rm appfw policy
Removes an application firewall policy.
Synopsis
rm appfw policy <name>
Arguments
name Name of the policy to remove.
stat appfw policy
Displays statistics for the specified application firewall policy. If no application firewall policy is specified, displays abbreviated statistics for all application firewall policies.
Arguments
name Name of the application firewall policy.
detail Specifies detailed output (including more statistics). The output can be quite voluminous. Without this argument, the output will show only a summary.
fullValues Specifies that numbers and strings should be displayed in their full form. Without this option, long strings are shortened and large numbers are abbreviated
ntimes The number of times, in intervals of seven seconds, the statistics should be displayed. Default value: 1 Minimum value: 0
logFile The name of the log file to be used as input.
clearstats Clear the statsistics / counters
Possible values: basic, full
Output
count devno stateflag
Counters
Policy hits (Hits) Number of hits on the policy
Policy undef hits (Undefhits) Number of undef hits on the policy
Example
stat appfw policy
add appfw policy
Creates an application firewall policy.
Arguments
name Name for the policy. Must begin with a letter, number, or the underscore character \(_\), and must contain only letters, numbers, and the hyphen \(-\), period \(.\) pound \(#\), space \( \), at (@), equals \(=\), colon \(:\), and underscore characters. Can be changed after the policy is created.
The following requirement applies only to the Citrix ADC CLI: If the name includes one or more spaces, enclose the name in double or single quotation marks \(for example, "my policy" or 'my policy'\).
rule Name of the Citrix ADC named rule, or a Citrix ADC expression, that the policy uses to determine whether to filter the connection through the application firewall with the designated profile.
profileName Name of the application firewall profile to use if the policy matches.
comment Any comments to preserve information about the policy for later reference.
logAction Where to log information for connections that match this policy.
rename appfw policy
Renames an application firewall policy.
Synopsis
rename appfw policy <name>@ <newName>@
Arguments
name Existing name of the application firewall policy.
newName New name for the policy. Must begin with a letter, number, or the underscore character (_), and must contain only letters, numbers, and the hyphen (-), period (.) pound (#), space ( ), at (@), equals (=), colon (:), and underscore characters.
The following requirement applies only to the Citrix ADC CLI: If the name includes one or more spaces, enclose the name in double or single quotation marks (for example, "my policy" or 'my policy').
Example
rename appfw policy oldname newname
show appfw policy
Displays the current settings for the specified application firewall policy. If no policy name is provided, displays a list of all application firewall policies currently configured on the Citrix ADC.
Arguments
name Name of the policy.
Output
stateflag rule Name of the Citrix ADC named rule, or a Citrix ADC expression, that the policy uses to determine whether to filter the connection through the application firewall with the designated profile.
profileName Name of the application firewall profile to use if the policy matches.
hits Number of hits.
piHits Number of hits.
undefHits Number of Undef hits.
gotoPriorityExpression Expression specifying the priority of the next policy which will get evaluated if the current policy rule evaluates to TRUE.
labelType Type of policy label invocation.
labelName Name of the label to invoke if the current policy rule evaluates to TRUE.
comment Any comments to preserve information about the policy for later reference.
logAction Where to log information for connections that match this policy.
boundTo The entity name to which policy is bound
activePolicy Indicates whether policy is bound or not.
priority Specifies the priority of the policy.
bindPolicyType policyType vserverType policyType type builtin Flag to determine if application firewall policy is built-in or not
devno count