Adding or removing a signatures object
You can add a new signatures object to the Web App Firewall by:
- Copying a built-in template.
- 复制现有的签名对象。
- Importing a signatures object from an external file.
You must use the GUI to copy a template or existing signatures object. You can use either the GUI or the command line to import a signatures object. You can also use either the GUI or the command line to remove a signatures object.
To create a signatures object from a template
Navigate toSecurity > Citrix Web App Firewall> Signatures.
In the details pane, select the signatures object that you want to use as a template.
Your choices are:
- Default Signatures.Contains the signatures rules, the SQL injection rules, and the cross-site scripting rules.
- XPath Injection.Contains the XPath injection patterns.
- Any existing signatures object.
Attention:
如果你不选择作为一种签名template, the Web App Firewall will prompt you to create signatures from scratch.
ClickAdd.
In the Add Signatures Object dialog box, type a name for your new signatures object, and then click OK. The name can begin with a letter, number, or the underscore symbol, and can consist of from one to 31 letters, numbers, and the hyphen (-), period (.) pound (#), space ( ), at (@), equals (=), and underscore (_) symbols.
ClickClose.
To create a signatures object by importing a file
- Navigate toSecurity > Citrix Web App Firewall > Signatures.
- In the details pane, clickAdd.
- In theAdd Signatures Object对话框中,选择的格式签名哟u want to import.
- To import a Citrix ADC format signatures file, select theNative Formattab.
- To import an external signatures format file, select theExternal Formattab.
- Choose the file that you want to use to create your new signatures object.
- To import a native Citrix ADC format signatures file, in the Import section select either Import from Local File or Import from URL, then type or browse to the path or URL to the file.
- To import a Cenzic, IBM AppScan, Qualys, or Whitehat format file, in the XSLT section select Use Built-in XSLT File, Use Local File, or Reference from URL. Next, if you chose Use Built-in XSLT File, select the appropriate file format from the drop-down list. If you chose Use Local File or Reference from URL, then type or browse to the path or URL to the file.
- ClickAdd, and then clickClose.
To create a signatures object by importing a file by using the command line
At the command prompt, type the following commands:
import appfw signatures
[-xslt ] [-comment ] [-overwrite] [-merge] [-sha1 ] save ns config
Example #1
The following example creates a new signatures object from a file named signatures.xml and assigns it the name MySignatures.
import appfw signatures local:signatures.xml MySignatures save ns config
To remove a signatures object by using the GUI
- Navigate toSecurity > Citrix Web App Firewall > Signatures.
- In the details pane, select the signatures object that you want to remove.
- ClickRemove.
To remove a signatures object by using the command line
At the command prompt, type the following commands:
rm appfw signatures
save ns config