Pre-Built Rules

HTML Extension

Changes all .htm requests to .html

Condition:

· Condition = Path

· Sense = Does

· Check = Match RegEx

· Value = \.htm$

Evaluation:

· Blank

Action:

· Action = Rewrite Path

· Target = $path$l

Index.html

Force to use index.html in requests to folders.

Condition: this condition is a general condition that will match most objects

· Condition = Host

· Sense = Does

· Check = Exist

Evaluation:

· Blank

Action:

· Action = Redirect 302

· Target = HTTP://$host$$path$index.html$querystring$

Close Folders

Deny requests to folders.

Condition: this condition is a general condition that will match most objects

· Condition = this need proper thought

· Sense =

· Check =

Evaluation:

· Blank

Action:

· Action =

· Target =

Hide CGI-BBIN:

Hides cgi-bin catalogue in requests to CGI scripts.

Condition: this condition is a general condition that will match most objects

· Condition = Host

· Sense = Does

· Check = Match RegEX

· Value = \.cgi$

Evaluation:

· Blank

Action:

· Action = Rewrite Path

· Target = /cgi-bin$path$

Log Spider

Log spider requests of popular search engines.

Condition: this condition is a general condition that will match most objects

· Condition = Request Header

· Match = User-Agent

· Sense = Does

· Check = Match RegEX

· Value = Googlebot|Slurp|bingbot|ia_archiver

Evaluation:

· Variable = $crawler$

· Source = Request Header

· Detail = User-Agent

Action:

· Action = Log Event

· Target = [$crawler$] $host$$path$$querystring$

Force HTTPS

Force to use HTTPS for certain directory. In this case if a client is accessing anything containing the /secure/ directory then they will be redirected to the HTTPs version of the URL requested.

Condition:

· Condition = Path

· Sense = Does

· Check = Contain

· Value = /secure/

Evaluation:

· Blank

Action:

· Action = Redirect 302

· Target = HTTPs://$host$$path$$querystring$

Media Stream:

Redirects Flash Media Stream to appropriate service.

Condition:

· Condition = Path

· Sense = Does

· Check = End

· Value = .flv

Evaluation:

· Blank

Action:

· Action = Redirect 302

· Target = HTTP://$host$:8080/$path$

Swap HTTP to HTTPS

Change any hardcoded HTTP:// to HTTPS://

Condition:

· Condition = Response Code

· Sense = Does

· Check = Equal

· Value = 200 OK

Evaluation:

· Blank

Action:

· Action = Body Replace All

· Target = HTTP://

· Data = HTTPs://

Blank out Credit Cards

Check that there are no credit cards in the response and if one is found, blank it out.

Condition:

· Condition = Response Code

· Sense = Does

· Check = Equal

· Value = 200 OK

Evaluation:

· Blank

Action:

· Action = Body Replace All

· Target = [0-9]+[0-9]+[0-9]+[0-9]+-[0-9]+[0-9]+[0-9]+[0-9]+-[0-9]+[0-9]+[0-9]+[0-9]+-[0-9]+[0-9]+[0-9]+[0-9]+

· Data = xxxx-xxxx-xxxx-xxxx

Content Expiry

Add a sensible content expiry date to the page to reduce the number of requests and 304s.

Condition: this is a generic condition as a catch all. It is recommended to focus this condition on your

· Condition = Response Code

· Sense = Does

· Check = Equal

· Value = 200 OK

Evaluation:

· Blank

Action:

· Action = Add Response Header

· Target = Cache-Control

· Data = max-age=3600

Spoof Server Type

Get the Server type and change it to something else.

Condition: this is a generic condition as a catch all. It is recommended to focus this condition on your

· Condition = Response Code

· Sense = Does

· Check = Equal

· Value = 200 OK

Evaluation:

· Blank

Action:

· Action = Replace Response Header

· Target = Server

· Data = Secret

Never Send Errors

Client never gets any errors from your site.

Condition

· Condition = Response Code

· Sense = Does

· Check = Contain

· Value = 404

Evaluation

· Blank

Action

· Action = Redirect 302

· Target = HTTP//$host$/

Redirect on Language

Find the language code and redirect to the related country domain.

Condition

· Condition = Language

· Sense = Does

· Check = Contain

· Value = German (Standard)

Evaluation

· Variable = $host_template$

· Source = Host

· Value = .*\.

Action

· Action = Redirect 302

· Target = HTTP//$host_template$de$path$$querystring$

Google Analytics

Insert the code required by Google for the analytics – Please change the value MYGOOGLECODE to your Google UA ID.

Condition

· Condition = Response Code

· Sense = Does

· Check = Equal

· Value = 200 OK

Evaluation

· blank

Action

· Action = Body Replace Last

· Target = </body>

· Data = <script

type=’text/javascript’> var _gaq = _gaq || []; _gaq.push([‘_setAccount’, ‘MY GOOGLE CODE’]); _gaq.push([‘_trackPageview’]); ( function() { var ga = document.createElement(‘script’); ga.type = ‘text/javascript’; ga.async = true; ga.src = (‘HTTPs’ == document.location.protocol ?‘HTTPs//ssl’ ‘HTTP//www’) + ‘.google-analytics.com/ga.js’; var s = document.getElementsByTagName(‘script’)[0];s.parentNode.insertBefore(ga, s); } )(); </script> </body>

IPv6 Gateway

Adjust Host Header for IIS IPv4 Servers on IPv6 Services. IIS IPv4 servers do not like to see an IPV6 address in the host client request so this rule replaces this with a generic name.

Condition

· blank

Evaluation

· blank

Action

· Action = Replace Request Header

· Target = Host

· Data =ipv4.host.header