Skip to content

contentInspection action

The following operations can be performed on "contentInspection action":

add| show| set| unset| rm

add contentInspection action

p{white-space: pre-wrap;}

Creates a RemoteService action.

Synopsys

add contentInspection action <name> -type <type> (-serverName <string> | (-serverip <ip_addr|ipv6_addr> [-serverport <positive_integer>])) [-icapProfileName <string>] [-ifserverdown <ifserverdown>] [-reqTimeout <positive_integer>] [-reqTimeoutAction <reqTimeoutAction>]

Arguments

name

Name of the remote service action. Must begin with an ASCII alphabetic or underscore (_) character, and must contain only ASCII alphanumeric, underscore, hash (#), period (.), space, colon (:), at (@), equals (=), and hyphen (-) characters.

type

Type of operation this action is going to perform. following actions are available to configure:

  • ICAP - forward the incoming request or response to an ICAP server for modification.

  • INLINEINSPECTION - forward the incoming or outgoing packets to IPS server for Intrusion Prevention.

  • MIRROR - Forwards cloned packets for Intrusion Detection.

  • NOINSPECTION - This does not forward incoming and outgoing packets to the Inspection device.

  • NSTRACE - capture current and further incoming packets on this transaction.

Possible values: ICAP, INLINEINSPECTION, MIRROR, NOINSPECTION

serverName

Name of the LB vserver or service

serverip

IP address of remoteService

serverport

Port of remoteService

Default value: 1344

Minimum value: 1

Maximum value: 65535

icapProfileName

Name of the ICAP profile to be attached to the contentInspection action.

ifserverdown

Name of the action to perform if the Vserver representing the remote service is not UP. This is not supported for NOINSPECTION Type. There are also some built-in actions which can be used. These are:

  • RESET - Reset the client connection by closing it. The client program, such as a browser, will handle this and may inform the user. The client may then resend the request if desired.

  • DROP - Drop the request without sending a response to the user.

Possible values: CONTINUE, DROP, RESET

Default value: CONTINUE

reqTimeout

Time, in seconds, within which the remote service request must complete. This is not supported for NOINSPECTION action type. If the request does not complete within this time, the specified request timeout action is executed. Zero disables the timeout.

Default value: 0

Minimum value: 0

Maximum value: 86400

reqTimeoutAction

Name of the action to perform if the Vserver representing the remote service does not respond. This is not supported for NOINSPECTION action type. There are also some built-in actions which can be used. These are:

  • RESET - Reset the client connection by closing it. The client program, such as a browser, will handle this and may inform the user. The client may then resend the request if desired.

  • DROP - Drop the request without sending a response to the user.

Possible values: BYPASS, DROP, RESET

Default value: BYPASS

show contentInspection action

p{white-space: pre-wrap;}

Displays information about a RemoteService action. If no name is specified, this command displays information of all available RemoteService actions.

Synopsys

show contentInspection action [<name>]

Arguments

name

Name of the RemoteService action.

Outputs

type

Type of RemoteService action.

serverName

Lb vserver or service name.

serverip

IP address of remoteService

serverport

Port of remoteService

icapProfileName

Name of the ICAP profile to be attached to the contentInspection action.

ifserverdown

Name of the action to perform if the Vserver representing the remote service is not UP. This is not supported for NOINSPECTION Type. There are also some built-in actions which can be used. These are:

  • RESET - Reset the client connection by closing it. The client program, such as a browser, will handle this and may inform the user. The client may then resend the request if desired.

  • DROP - Drop the request without sending a response to the user.

reqTimeout

Time, in seconds, within which the remote service request must complete. This is not supported for NOINSPECTION action type. If the request does not complete within this time, the specified request timeout action is executed. Zero disables the timeout.

reqTimeoutAction

Name of the action to perform if the Vserver representing the remote service does not respond. This is not supported for NOINSPECTION action type. There are also some built-in actions which can be used. These are:

  • RESET - Reset the client connection by closing it. The client program, such as a browser, will handle this and may inform the user. The client may then resend the request if desired.

  • DROP - Drop the request without sending a response to the user.

hits

The number of times the action has been taken.

referenceCount

The number of references to the action.

undefHits

The number of times the action resulted in UNDEF.

stateflag

builtin

Flag to determine whether contentinspection action is built-in or not

feature

The feature to be checked while applying this config

devno

count

Example

  1. show contentinspection action
    1. show contentinspection action act_icap

set contentInspection action

p{white-space: pre-wrap;}

Modifies the specified parameters of a RemoteService action.

Synopsys

set contentInspection action <name> [-serverName <string>] [-serverip <ip_addr|ipv6_addr>] [-serverport <positive_integer>] [-icapProfileName <string>] [-ifserverdown <ifserverdown>] [-reqTimeout <positive_integer>] [-reqTimeoutAction <reqTimeoutAction>]

Arguments

name

Name of the RemoteService policy to modify.

serverName

Name of the LB vserver or service

serverip

IP address of remoteService

serverport

Port of remoteService

Default value: 1344

Minimum value: 1

Maximum value: 65535

icapProfileName

Name of the ICAP profile to be attached to the contentInspection action.

ifserverdown

Name of the action to perform if the Vserver representing the remote service is not UP. This is not supported for NOINSPECTION Type. There are also some built-in actions which can be used. These are:

  • RESET - Reset the client connection by closing it. The client program, such as a browser, will handle this and may inform the user. The client may then resend the request if desired.

  • DROP - Drop the request without sending a response to the user.

Possible values: CONTINUE, DROP, RESET

Default value: CONTINUE

reqTimeout

Request time out value

Default value: 0

Minimum value: 0

Maximum value: 86400

reqTimeoutAction

Action to be taken in case request time out is met

Possible values: BYPASS, DROP, RESET

Default value: BYPASS

Example

set contentinspection action caact1 -type IPS"

unset contentInspection action

p{white-space: pre-wrap;}

Use this command to remove contentInspection action settings.Refer to the set contentInspection action command for meanings of the arguments.

Synopsys

unset contentInspection action <name> [-serverport] [-ifserverdown] [-reqTimeout]

rm contentInspection action

p{white-space: pre-wrap;}

Removes a contentinspection action.

Synopsys

rm contentInspection action <name>

Arguments

name

Name of the RemoteService action to remove.

Example

rm contentinspection action act_before