Configure HTTP/HTTPS filter parameters used to filter certain types of inbound or outbound web traffic.
Procedure
- On the Secure Access Resources screen,
click the HTTP/HTTPS Traffic Filters tab and then click
Add.The HTTP/HTTPS Traffic Filter Settings screen appears.
- Specify a name for the filter and add an optional description.
- Optionally, select one or more request methods to match the filter.
Supported request methods
MethodDescriptionGETRequests a representation of the specified resource including the request or response bodyPOSTSubmits data from the request body to the specified resource. This may result in the creation of a new resource or the update of existing resources.PUTUploads a representation of the specified resourceHEADRequests a representation of the specified resource without the request or response body, useful for retrieving only meta-information from headersDELETEDeletes the specified resource - Optionally, specify applicable URLs for the filter.
-
Select Any specified URL host name or IP address to include host names or IP addresses (including port numbers, if any).
-
Select Any specified URL path to include specific URL paths. Do not start paths with slashes (/) or include query-related question marks (?).
Applicable URLs support both ? and * wildcards. ? matches any single character while * matches any number of any characters.URL Host Name or IP AddressURL Pathwww.example.com matches www.example.com only.example.com/news.htm matches example.com/news.htm only.www.example.c? matches www.example.co but not www.example.com.example.com/news?.htm matches example.com/news1.htm but not example.com/news11.htm.*.example.com matches jp.example.com and us.example.com.To match all URLs with paths including news, type *news*. -
- Specify the filter parameters.
- Select Request for outbound request traffic or Response for inbound response traffic.
- Specify the header field.
Important
Only header fields that follow HTTP/HTTPS naming standards are supported. Common header fields include:-
User-Agent: Specifies the details of the user agent
-
Content-Type: Specifies the type of content
-
Content-Length: Specifies the size of the content in 8-bit bytes
-
Content-Disposition: Identifies specific content types along with associated file names
-
- Select the desired operator from the drop-down list.Available operators include both string value (keyword) matching operators and integer value comparison operators.
-
CONTAINS: The header field contains the specified keyword. Multiple keywords have an OR relationship.
-
NOT CONTAINS: The header field does not contain the specified keyword. Multiple keywords have an AND relationship.
-
=, ≠, ≥, ≤: The header field contains an integer that equals, does not equal, is greater than or equal to, or less than or equal to the specified integer value.
-
EXISTS: The header includes the specified header field.
-
NOT EXISTS: The header does not include the specified header field.
-
- Enter the desired value as a string or integer if necessary.
- Add additional filter parameters by clicking Add.
- Click Save.
NoteTraffic filters are triggered from internet access control rules only when all
specified parameters, including request methods and URLs, are matched.
|