Home > Configuration > CI

Use this method to creates a RemoteService action.

Use this method to adds an expression element that, when evaluated, sends a request to Content Inspection service and receives a response from the service. Can be used to obtain additional information for use in evaluating policy rules and other expressions. The expression prefix SYS.CI_CALLOUT invokes a Content Inspection callout.

Use this method to creates a contentInspection policy, which specifies requests that the Citrix ADC intercepts and executes the specified action.

Use this method to creates a user-defined contentInspection policy label.

Use this method to adds ContentInspection profile to the NetScaler appliance.

Use this method to adds a CI WASM profile to the Citrix ADC.

Use this method to bind policy to contentinspection global.

Use this method to bind policy to contentinspection policylabel.

Use this method to get information about a RemoteService action. If no name is specified, this method displays information of all available RemoteService actions.

Use this method to get information about the configured Content Inspection callouts.

Use this method to get the list of policies bound to the specified contentInspection global policy bank. If no policy bank is specified, displays a list of all policies bound to contentInspection global.

Use this method to get the Contentinspection parameters.

Use this method to get the current settings for the specified contentInspection policy.

Use this method to get the current settings for the specified contentInspection policy label.

Use this method to get contentinspection profile/s configured on netscaler

Use this method to get CI WASM profile info

Use this method to renames the specified contentInspection policy.

Use this method to renames a contentInspection policy label.

Use this method to removes a contentinspection action.

Use this method to removes a Content Inspection callout. You cannot remove a Content Inspection callout that is used in any part of policy, action, or expression.

Use this method to removes the specified contentInspection policy.

Use this method to removes the specified contentInspection policy label.

Use this method to removes contentinspection profile.

Use this method to removes a CI WASM profile.

Use this method to set name of the ICAP profile to be attached to the contentInspection action.

Use this method to set name of the action to perform if the Vserver representing the remote service is not UP. This is not supported for NOINSPECTION Type. The Supported actions are:
* RESET - Reset the client connection by closing it. The client program, such as a browser, will handle this and may inform the user. The client may then resend the request if desired.
* DROP - Drop the request without sending a response to the user.
* CONTINUE - It bypasses the ContentIsnpection and Continues/resumes the Traffic-Flow to Client/Server.

Use this method to set iP address of remoteService

Use this method to set name of the LB vserver or service

Use this method to set port of remoteService

Use this method to set name of the CI WASM profile to be attached to the contentInspection action.

Use this method to set any comments to preserve information about this Content Inspection callout.

Use this method to set name of the Content Inspection profile. The type of the configured profile must match the type specified using -type argument.

Use this method to set expression that extracts the callout results from the response sent by the CI callout agent. Must be a response based expression, that is, it must begin with ICAP.RES. The operations in this expression must match the return type. For example, if you configure a return type of TEXT, the result expression must be a text based expression, as in the following example: icap.res.header("ISTag")

Use this method to set type of data that the target callout agent returns in response to the callout.
Available settings function as follows:
* TEXT - Treat the returned value as a text string.
* NUM - Treat the returned value as a number.
* BOOL - Treat the returned value as a Boolean value.
Note: You cannot change the return type after it is set.

Use this method to set iP address of Content Inspection server. Mutually exclusive with the server name parameter.

Use this method to set name of the load balancing or content switching virtual server or service to which the Content Inspection request is issued. Mutually exclusive with server IP address and port parameters. The service type must be TCP or SSL_TCP. If there are vservers and services with the same name, then vserver is selected.

Use this method to set port of the Content Inspection server.

Use this method to set action to perform if the result of policy evaluation is undefined (UNDEF). An UNDEF event indicates an error condition in evaluating the expression.
Available settings function as follows:
* NOINSPECTION - Do not Inspect the traffic.
* RESET - Reset the connection and notify the user's browser, so that the user can resend the request.
* DROP - Drop the message without sending a response to the user.

Use this method to set name of the contentInspection action to perform if the request matches this contentInspection policy.
There are also some built-in actions which can be used. These are:
* NOINSPECTION - Send the request from the client to the server or response from the server to the client without sending it to Inspection device for Content Inspection.
* RESET - Resets the client connection by closing it. The client program, such as a browser, will handle this and may inform the user. The client may then resend the request if desired.
* DROP - Drop the request without sending a response to the user.

Use this method to set any type of information about this contentInspection policy.

Use this method to set name of the messagelog action to use for requests that match this policy.

Use this method to set expression that the policy uses to determine whether to execute the specified action.

Use this method to set action to perform if the result of policy evaluation is undefined (UNDEF). An UNDEF event indicates an internal error condition. Only the above built-in actions can be used.

Use this method to set egress interface for CI profile.It is a mandatory argument while creating an ContentInspection profile of type INLINEINSPECTION or MIRROR.

Use this method to set egress Vlan for CI

Use this method to set ingress interface for CI profile.It is a mandatory argument while creating an ContentInspection profile of IPS type.

Use this method to set ingress Vlan for CI

Use this method to set iP Tunnel for CI profile. It is used while creating a ContentInspection profile of type MIRROR when the IDS device is in a different network

Use this method to set transaction data size (in KB) greater than which a transaction is considered as anomalous. Default is 512KB.

Use this method to set transaction time (in milliseconds) above which a transaction is considered as anomalous. Default is 1 seconds.

Use this method to set max data size (in KB) that will be sent to the CI Agent. Default is 16KB. Maximum value that can be configured is 32KB.

Use this method to set timeout (in milliseconds) for the connection with the CI WASM agent

Use this method to set timeout action for the connection with the CI agent. Either the original request can be bypassed i.e. request/response is forwarded to the endpoint or the transaction is dropped/reset.

Use this method to set name of the WASM Module

Use this method to unbind policy from contentinspection global.

Use this method to unbind priority from contentinspection global.

Use this method to unbind policy from contentinspection policylabel.

Use this method to unbind priority from contentinspection policylabel.

Remove contentinspection action ifserverdown setting.

Remove contentinspection action serverport setting.

Remove contentinspection callout comment setting.

Remove contentinspection callout serverport setting.

Remove contentinspection parameter undefaction setting.

Remove contentinspection policy comment setting.

Remove contentinspection policy logaction setting.

Remove contentinspection policy undefaction setting.

Remove contentinspection profile egressvlan setting.

Remove contentinspection profile ingressvlan setting.

Remove contentinspection wasmProfile anomalousdatasize setting.

Remove contentinspection wasmProfile anomalousttfbtime setting.

Remove contentinspection wasmProfile maxbodylen setting.

Remove contentinspection wasmProfile timeout setting.

Remove contentinspection wasmProfile timeoutaction setting.