Adding a Variable is a compelling feature that will allow you to extract data from the request and utilize it in the Actions. For example, you could log a user username or send an email if there is a security problem.
· Variable: This must start and end with a $ symbol. For example $variable1$
· Source: Select from the drop-down box the source of the variable
· Detail: Select from the list when relevant. If the Source=Request Header, the Details could be User-Agent
· Value: Enter the text or regular expression to fine-tune the variable.
Built-in Variables:
· Built-In variables have already been hard coded, so you do not need to create an evaluation entry for these.
· You can use any of the variable listed below in your action
· The explanation for each variable is located in the “Condition” table above
o Method = $method$
o Path = $path$
o Querystring = $querystring$
o Sourceip = $sourceip$
o Response code (text also included “200 OK”) = $resp$
o Host = $host$
o Version = $version$
o Clientport = $clientport$
o Clientip = $clientip$
o Geolocation = $geolocation$”
Example Action:
· Action = Redirect 302
o Target = HTTPs://$host$/404.html
· Action = Log
o Target = A client from $sourceip$:$sourceport$ has just made a request $path$ page
Explanation:
· A client accessing page that does not exist would ordinarily be presented with a browsers 404 page
· In this instance the user is redirected to the original hostname they used but the wrong path is replaced with 404.html
· An entry is added to the syslog saying “A client from 154.3.22.14:3454 has just made a request to wrong.html page”
Source
Description
Example
Cookie
This is the name and value of the cookie header
MS-WSMAN=afYfn1CDqqCDqUD::Where the name is MS-WSMAN and the value is afYfn1CDqqCDqUD::
Host
This is the hostname extracted from the URL
www.mywebsite.com or 192.168.1.1
Language
This is the language extracted from the Language HTTP header
This condition will produce a dropdown with a list of languages.
Method
This is a drop down of HTTP methods
The dropdown will include GET, POST
Path
This is the path of the website
/mywebsite/index.html
POST
POST request method
Check data being uploaded to a website
Query Item
This is the name and value of a query. As such it can either accept the query name or a value also
“Best=jetNEXUS” Where the Match is Best and the Value is edgeNEXUS
