CSS1506 - Filter admin URL's

I am currently migrating all of our prod environments from our NetApp reverse proxy to our CSS. So far everything has gone well. Client to CSS is SSL and then http to the backend servers.
I am about to migrate 1 application where I need to filter out certain admin URL's from the public. Is there a way to filter out these URL's on the CSS ?
Any help would be appreciated.
Cheers
Dave

Not really.
The CSS is a loadbalancer, not a proxy.
What you can do is catch some url into a specific rule that forwards the request to a specific server that can then display an error message.
Under a content rule use the command 'url' or 'urql' to catch a specific url.
Gilles.

Similar Messages

5.0 created ISA user roles won't save in ISA user admin URL

We just upgraded from 4.0 to 5.0, in config I assigned these roles & we can see them in the ISA user admin URL.
SAP_CRM_ECO_ISA_WU_B2B_FULL
SAP_CRM_INTERNET_CUSTOMER
We can select them and assign to the box on the right and save, but when we go in they are on the left in the non assigned box. Why won't they save?????
The Z roles from 4.0 can be saved but they can't run ISA application as they don't have all the components.
will give points.

answer was security was not correct

Recorset filter by url then group by

I have a search results page that get its information via a
complex form then their is a more details page which is filtered by
the url i want to put another record set on the page which pick up
the info from the URl but then sort the information from a feild
which contains codes i want to select only part of the code ie
first 3 digits of the code.
i am using dreamweaver 8
this is the code from the dreamweaver panel if i fillet them
seprately they work but together i get no data can any give me a
clue on how to filter by url then group by field if contains "text"
SELECT *
FROM all1
WHERE product_name = 'MMColParam' AND product_id LIKE
'testVariable'
variables
MMColParam 1 Request.QueryString("product_name")
testVariable "%thr%" testVariable

thanks !
my URL call a template, so, is this the good url ? :
<SAP_BW_URL ITEM='*TPL*' MULTI='X' HIDDEN='X' FILTER_NODE_IOBJNM_1='ZIS_PDT' FILTER_VALUE_1='C' CMD_1='ITEM=*TPL1*&MULTI=X&HIDDEN='>
or did i must put it in the CMD like this ? :
<SAP_BW_URL ITEM='*TPL*' MULTI='X' HIDDEN='X' CMD_1='ITEM=*TPL1*&MULTI=X&HIDDEN=&FILTER_NODE_IOBJNM_1='ZIS_PDT'&FILTER_VALUE_1='C''>
another question,
in my query, did the characteristic must be in "free characteristic" or in "filter" or nowhere ???
thanks a lot

Insert filter by url of the template

Hello Wad experts,
can someone tell me how to insert filter by url of the template ?
using a CMD i think, but I need some help.
thanks for helping me

thanks !
my URL call a template, so, is this the good url ? :
<SAP_BW_URL ITEM='*TPL*' MULTI='X' HIDDEN='X' FILTER_NODE_IOBJNM_1='ZIS_PDT' FILTER_VALUE_1='C' CMD_1='ITEM=*TPL1*&MULTI=X&HIDDEN='>
or did i must put it in the CMD like this ? :
<SAP_BW_URL ITEM='*TPL*' MULTI='X' HIDDEN='X' CMD_1='ITEM=*TPL1*&MULTI=X&HIDDEN=&FILTER_NODE_IOBJNM_1='ZIS_PDT'&FILTER_VALUE_1='C''>
another question,
in my query, did the characteristic must be in "free characteristic" or in "filter" or nowhere ???
thanks a lot

Java weblogic.Admin -url t3://localhost:7001 PING vs, CONNECT

Hello:
We use Weblogic 5.1 on AIX and would like to know the difference
between a java weblogic.Admin -url t3://localhost:7001 PING and a
CONNECT?
What is the web server indication if one or both fail? For example,
if a PING is successful, but a CONNECT is not, what does that
indicate? If a CONNECT is successful, does is there any reason to
PING it - wouldn't a PING be successful if a CONNECT was?
Thanks in advance for any information you folks can provide,
Regards

Anyone please ?
What am I missing here ?
Thanks.

Someone changed the apex admin URL then left the co; how can I retrieve it?

Hi alll
I have an XE database running an APEX site at http://127.0.0.1/ port 80
http://127.0.0.1/apex is 404 NOT FOUND
How can I find the admin URL of the apex? This is Windows 64 bit
Edited by: charred on Feb 14, 2012 10:33 AM

Hi,
which XE-release did you configure how to run which APEX on port 80?
Basically, the error message you receive tells you you don't have APEX on port 80...
Note that the default port for the APEX shipped with XE would be 8080.
The Admin-URL for apex would usually be http://<yourhost>:<yourport>/apex/apex_admin
-Udo

How to filter in URL using NW04s WAD?

Greeting Web Template Gurus,
I am working in NW04s SP12 WAD (Web Application Designer) and I am trying to use the filtering criteria in my URL... <bwurl>&FILTER_IOBJNM=0PLANT&FILTER_VALUE=1000. I have brought in the Filter Pane in the Web template and when I run the Web Template in IE, I do not see where 0PLANT is being used.
Is there a setting in the Web Template I am missing, or a specific Command I need to be running to get this to work for me?
Regards,
Alex

Hello Alex,
Please try to pass the command using the Template ID and not using the Query,
for example
http://<server><port>/irj/servlet/prt/portal/prtroot/pcd!3aportal_content!2fcom.sap.pct!2fplatform_add_ons!2fcom.sap.ip.bi!2fiViews!2fcom.sap.ip.bi.bex?QUERY=MMFG_M03_Q0088&FILTER_IOBJNM_1=MPLANT&FILTER_VALUE_1=3010
instead of using QUERY=MMFG_M03_Q0088, try WebTemplate as given below, it may help you
http://<server><port>/irj/servlet/prt/portal/prtroot/pcd!3aportal_content!2fcom.sap.pct!2fplatform_add_ons!2fcom.sap.ip.bi!2fiViews!2fcom.sap.ip.bi.bex?template_id=yourTemplate&FILTER_IOBJNM_1=MPLANT&FILTER_VALUE_1=3010
See this page for more info
[Calling Parameterized Web Templates|http://help.sap.com/saphelp_nw04/helpdata/en/27/6c013a53271a05e10000000a11402f/content.htm]
Thanks
Chandran

Process Administrator and Workspace admin url for 10gR3

I am running 10gR3 bpm locally.
Url to access my local workspace is http://localhost:8585/workspace/faces/jsf/workspace/workspace.xhtml
Could you let me know the URL for accessing the process administrator and workspace admin.
Thanks in advance.

Looking at your port 8585 it is the default port for Studio, in Studio there is no webconsole or workspace administrator, those applications only are available in enterprise.
If your case is enterprise then the url is /webconsole and /portaladmin
HTH

Interactive report row-level ("OR") filter via URL?

I know you can perform a column level filter on an Interactive Report via URL, but can you do a row level filter?
I want to do something like where column 1 = 'test' OR column 2 = 'test', not column 1= 'test AND column 2 = 'test'.
Thank you and apologies if I am missing something in the documentation or other forum messages.

Jeff,
Thanks again for the response and for looking into it. However, if I am not mistaken, the url in that excerpt does the same thing as the URL I posted except that you used IREQ_COLNAME instead of IR_COLNAME (which defaults to EQ I believe).
I want to see if a value is in column a OR column b, etc. The "OR" is the all important caveat.
I would settle for being able to pass a value to the IR's main search box (that searches all columns of all rows) if I cannot do a targeted row level filter on a few select columns.
If anyone knows how to do either of those things, that would be great information to have.
Thanks,

What is the Weblogic Portal Admin URL

Hi,
I am learning the Weblogic Portal using workshop. I Installed Weblogic Portal 10.3.2 with Workshop and created a sample portal application, configured the Workshop to start the weblogic server and start the server,Run my application EAR into server and saw theopen administration console.
Please clarify the following quesitons
1. How do i deploy the portal application and access my application without using Workshop?
2. What is the portal admin console url,port number?
3. What is the purpose of using application specific console in WLP i.e http://localhost:port/myappAdmin ?
4. is there any common administrator console in WLP i.e without using application specific console like http://localhost:port/myappAdmin ?
Your help is greatly appreciated.
Thanks a lot
Suresh

Suresh -
1. To deploy without Workshop/Eclipse, you will generally create an EAR of your application (via the Export Wizard under the File > Export menu) and deploy that with either the WLS console, WLST, or the weblogic.Deployer utility class. http://download.oracle.com/docs/cd/E15919_01/wlp.1032/e14245/deployment.htm#i1027718 has a fair amount of information.
2. The WLP admin portal is a webapp deployed as part of your application, via the wlp-tools-admin-app-lib.ear shared library. So, its host and port number are the same as wherever you deploy your application. The url path of the admin portal is controlled via your application's META-INF/weblogic-application.xml file; there's a <wls:library-context-root-override> element for the 'tools' context-root.
3. Since the WLP admin portal is a webapp deployed as part of your application, it needs to have a unique context-root to support deploying multiple WLP applications. The ear wizard in Eclipse defaults to specifying the context-root as [appname]Admin to support this, but you can always change the context-root as I described above.
4. No, currently, the WLP admin console is application-scoped and controls the configuration and behavior for that application. So, for multiple applications, you will have to use multiple admin console urls.
Greg

Portal admin URL via www server

Hi,
We are using the portal admin web tool located in the http://localhost:7001/xxxAdmin
The portal shows up and usable perfectly. However I would like to use it via webserver. The webserver redirects my URL to the http://localhost:7001/xxxAdmin.
So my request->http://xxx.com/xxAdmin is redirected to http://localhost:7001/xxxAdmin.
Login page shows up perfectly. I try to log in and the URL is broken. http://localhost:7001/xxxAdmin/login/login.do shows a page not found. Of course on the web there is no localhost.
How can I avoid this redirect? Or how can I hardcode the URL to use? I understood that the beehive-url-template.xml is for similar purpose but what is the template url name that the portal admin tool is using? Any other solution?

Suresh -
1. To deploy without Workshop/Eclipse, you will generally create an EAR of your application (via the Export Wizard under the File > Export menu) and deploy that with either the WLS console, WLST, or the weblogic.Deployer utility class. http://download.oracle.com/docs/cd/E15919_01/wlp.1032/e14245/deployment.htm#i1027718 has a fair amount of information.
2. The WLP admin portal is a webapp deployed as part of your application, via the wlp-tools-admin-app-lib.ear shared library. So, its host and port number are the same as wherever you deploy your application. The url path of the admin portal is controlled via your application's META-INF/weblogic-application.xml file; there's a <wls:library-context-root-override> element for the 'tools' context-root.
3. Since the WLP admin portal is a webapp deployed as part of your application, it needs to have a unique context-root to support deploying multiple WLP applications. The ear wizard in Eclipse defaults to specifying the context-root as [appname]Admin to support this, but you can always change the context-root as I described above.
4. No, currently, the WLP admin console is application-scoped and controls the configuration and behavior for that application. So, for multiple applications, you will have to use multiple admin console urls.
Greg

Userhome filter, new URL(csv)

Hello
My question is about the userhome filter.
I have put one more URL in the URLs(cvs), now the entries are:
Personal Documents, favorites:Favorites, actioninbox, temp, clp, mynewentry
But the folder is not created. I'm not sure the filter is working right because neither the other URLs are created. The only ones that user have right now are Personal Documents and Favorites.
Why is not my folder created?
Thanks in advance.
Guillermo.

Ok, I found the reason why the folder was not created.
The filter creates the folders only when you access to that folders.
I was thinking that it worked when the users log into the portal.
So, you hace to do a KM navigation iView that points to the folder although the folder still doesn't exist.
When the iView is launched the filter automatically creates the folder.
Agur!

Folder filter on URL property

On Portal 4.5WS, I'm crawling a site of news archives and I want to sort them into subfolders by year. The target site is laid out in folders by date, so the URL contains the month and year in the path similar to .../122004/file.htm. I have created subfolders for each year, and created a filter with one criteria, where URL contains 2004, leaving the Text Contains field empty. None of the cards are passing the filter, so they are all ending up in the parent folder. As a test, I changed the filtered property from URL to Name and changed the criteria from 2004 to a word in the Name of an existing card, and the sort worked fine.
Is there something special about using the URL property in a filter? Is there a trick to specify a partial URL as a filter value? What am I missing here?

Hi Marcel,
I know what you meant, the time from %time_set% is being compared with the times from %year%.jan till %year%.dec on an alphabetical order.
i was wondering if you have any solution to this?
i have been playing around with different combination, and they all don't work, i.e.
*when time
*is < %time_set%.timeid    -> compares alphabetically OR
*when time.timeid
*is < %time_set%.timeid    -> grabs timeid from time, and only the year from %time_set% OR
*when time.timeid
*is < %time_set%    ->grabs timeid from time, and only the year from %time_set% OR
*when time
*is < %time_set%    -> compares alphabetically.
anyone has any suggestions on this matter?
cheers

WSA how to filter HTTPS urls without decrypting

In transparent mode HTTPS Proxy must be activated for HTTPS traffic.
If you don't want particular users to access certain https sites with out decryption , you can define those urls in custom url categories and under decryption policies :
1. Exclude that custom url category from global decryption policy
2. Create new decryption policy for those identities you want to block request and then under categories include that custom url. Default action you will get for this category is monitor .
3. If you leave it as such then it continues to evaluate the client request against other policy group control settings, such as web reputation filtering or you can use drop action if you do not want to pass the connection request to the server. The appliance does not notify the user that it dropped the connection.
HTH
"Please rate useful posts"

Dear Kush
Thanks for the reply.... you advise to start with a new Decryption Policy for Guest users. So I have now created several Decryption Policies, for Guests, Authenticated Users, VIP Users. The Guest URL Filtering is set to DROP many Categories and to Pass Through the rest, and the VIP Policy drops only the worse categories (Porn, etc) and Pass Through most. If I set the HTTPS Filter=Monitor, then it will decrypt.
I think it is working as I need it, but as a Guest User I can still bypass the Ironport block by entering http://www.youtube.com into Internet Explorer v8 (XPsp3) - However, on the same PC with Firefox v28 https://www.youtube.com is blocked. (IE8 detects the traffic as "SRCH" traffic to 74.125.21.95:443, Firefox detects category "VID" to 74.125.196.91:443)
I'll do some more testing, then feedback to the forum again...
Martin
PS. What I don't like about the solution: I need to setup two sets of URL Category Filters: for the HTTPS proxy (under Decryption Policies) and for the HTTP proxy (under Access Policies) - even though I want the same Group based filters for HTTP and HTTPS. I did not expect to have to setup two separate sets of filters.

ACE filter by url

Hi,
I want to redirect some url on a specific server of mywebfarm. The loadbalancing work but the specific rules I create based on http url not. (The loadbalancing dont keep the same server during the same user session by the way)
Here is my config :
access-list ANY line 8 extended permit icmp any any
access-list ANY line 16 extended permit ip any any
probe tcp PROBE_TCP
interval 30
passdetect interval 60
rserver host web1
ip address 172.16.0.101
conn-limit max 50000 min 40000
inservice
rserver host web2
ip address 172.16.0.102
conn-limit max 50000 min 40000
inservice
serverfarm host FARM_WEB
predictor leastconns
probe PROBE_TCP
rserver web1
   inservice
rserver web2
   inservice
serverfarm host SINGLE_WEB1
rserver web1
   inservice
parameter-map type http HTTP_PARAMETER_MAP
persistence-rebalance
class-map match-all L4-WEB-IP
2 match virtual-address x.x.x.x tcp eq www
class-map match-all L4-WEBHTTPS-IP
2 match virtual-address x.x.x.x tcp eq https
class-map type http loadbalance match-all L7CLASSWEB1
2 match http url http://www.mycompany*
class-map type http loadbalance match-all L7CLASSWEB1-Mycompany.com
2 match http url http://www.mycompany.com/*
class-map type management match-all REMOTE_ACCESS
2 match protocol ssh any
policy-map type management first-match REMOTE_MGMT_ALLOW_POLICY
class REMOTE_ACCESS
   permit
policy-map type loadbalance http first-match WEB_L7_POLICY
class L7CLASSWEB1
   serverfarm SINGLE_WEB1
class L7CLASSWEB1-Mycompany.com
   serverfarm SINGLE_WEB1
class class-default
   serverfarm FARM_WEB
   insert-http x-forward header-value "%is"
   insert-http X-FORWARDED-FOR header-value "%is"
policy-map multi-match WEB-to-vIPs
class L4-WEB-IP
   loadbalance vip inservice
   loadbalance policy WEB_L7_POLICY
   loadbalance vip icmp-reply active
   nat dynamic 1 vlan 2129
   appl-parameter http advanced-options HTTP_PARAMETER_MAP
class L4-WEBHTTPS-IP
   loadbalance vip inservice
   loadbalance policy WEB_L7_POLICY
   loadbalance vip icmp-reply active
   nat dynamic 1 vlan 2129
   appl-parameter http advanced-options HTTP_PARAMETER_MAP

Hello Jean
The first thing which comes to my mind when you say: "The loadbalancing dont keep the same server during the same user session by the way" is you need to configure some stickiness configuration, here you have a link about it:
http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/vA5_1_0/configuration/slb/guide/sticky.html#wp1007300
For the redirection question, what exactly do you want to acomplish?
Here you have an example which might help you out: http://docwiki.cisco.com/wiki/URL_Load_Balancing_Using_One_Arm_Mode_with_Source_NAT_on_the_Cisco_Application_Control_Engine_Configuration_Example
ACE-1/onearm(config)# class-map slb-vip
ACE-1/onearm(config-cmap)# match virtual-address 172.16.5.101 any
ACE-1/onearm(config)# class-map type http loadbalance match-all images
ACE-1/onearm(config-cmap-http-lb)# match http url /images/.*
ACE-1/onearm(config)# policy-map type loadbalance http first-match slb-logic
ACE-1/onearm(config-pmap-lb)# class images
ACE-1/onearm(config-pmap-lb-c)# serverfarm imagefarm
ACE-1/onearm(config-pmap-lb-c)# class class-default
ACE-1/onearm(config-pmap-lb-c)# serverfarm webfarm
As you can see above in this partial configuration, you have the VIP:172.16.5.101, that is
our website: www.example.com, now we want to match www.example.com/images/, this is where we
aree using the other class-map and based on that we finally execute the action of sending the
request to the serverfarm imagefarm.
Hope this helps!!!
Jorge
http://docwiki.cisco.com/wiki/URL_Load_Balancing_Using_One_Arm_Mode_with_Source_NAT_on_the_Cisco_Application_Control_Engine_Configuration_Example

CSS1506 - Filter admin URL's

Similar Messages

Maybe you are looking for