Conditional Auditing 7a325eb8051b7a4d13bf9fed9e4a9b23 FOLDER 2022-03-04T14:59:05.827-08:00 Conditional Auditing audit.services d01edc5360e402447d935a5a77d3b7ba CLUSTER_PROPERTY 2022-03-04T14:59:05.827-08:00 audit.services null Conditional Audit Messages in Policy d01edc5360e402447d935a5a77d3affa POLICY 2022-03-04T14:59:05.835-08:00 Conditional Audit Messages in Policy Include 7 false <?xml version="1.0" encoding="UTF-8"?> <wsp:Policy xmlns:L7p="http://www.layer7tech.com/ws/policy" xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="**************************************************************************************************"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="* Policy for Conditional Auditi Message in Policy encapsulated assertion"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="* "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="* Check if ${service.oid} is in ${gateway.audit.services} and enable auditing if so"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="* "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="* audit.services is a cluster property with space delimited list of oids that will be audited"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="* --> See Service Properties to determine a service's oid"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="* "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="* Use this in the global Pre-Service policy or at the beginning of any service policy."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="* "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="* Jay MacDonald - 20220304"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="**************************************************************************************************"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${gateway.audit.services}"/> <L7p:Expression2 stringValue="${service.oid}"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="${service.oid}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check if service is in the CWP and turn on Audit Messages in Policy if so"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> Conditional Audit Messages in Policy d01edc5360e402447d935a5a77d3b0cf ENCAPSULATED_ASSERTION 2022-03-04T14:59:05.835-08:00 Conditional Audit Messages in Policy 07c5e85b-0fae-4372-8272-ce95f7685149 false Check if ${service.oid} is in ${gateway.audit.services} and enable auditing if so internalAssertions Edit16.gif false 923caa31-cfda-4415-b64d-c6836c5fb4b7 Demonstrate Conditional Auditing 7a325eb8051b7a4d13bf9fed9e4a9a76 SERVICE 2022-03-04T14:59:05.839-08:00 Demonstrate Conditional Auditing true /demo/conditionalAudit GET POST PUT DELETE false 13 false false false <?xml version="1.0" encoding="UTF-8"?> <wsp:Policy xmlns:L7p="http://www.layer7tech.com/ws/policy" xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="*******************************************************************************"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="* Policy to demonstrate Conditional Auditing"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="* "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="* Jay MacDonald - 20220304"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="*******************************************************************************"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="07c5e85b-0fae-4372-8272-ce95f7685149"/> <L7p:EncapsulatedAssertionConfigName stringValue="Conditional Audit Messages in Policy"/> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${auditLevel}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="WARNING"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="VGhpcyByZXF1ZXN0IHNob3VsZCBoYXZlIHRyaWdnZXJlZCBhbiBhdWRpdA=="/> <L7p:VariableToSet stringValue="message"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${auditLevel} == WARNING"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="VGhpcyByZXF1ZXN0IHNob3VsZCBub3QgaGF2ZSB0cmlnZ2VyZWQgYW4gYXVkaXQ="/> <L7p:VariableToSet stringValue="message"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set ${message} for the response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:Base64ResponseBody stringValue="YXVkaXRMZXZlbCA9ICR7YXVkaXRMZXZlbH0KCmF1ZGl0LnNlcnZpY2VzIHByb3BlcnR5ID0gJHtnYXRld2F5LmF1ZGl0LnNlcnZpY2VzfQoKJHttZXNzYWdlfQoKVG8gZW5hYmxlIGNvbmRpdGlvbmFsIGF1ZGl0aW5nIGZvciB0aGlzIHNlcnZpY2UsIGFkZCAke3NlcnZpY2Uub2lkfSB0byBhdWRpdC5zZXJ2aWNlcyBjbHVzdGVyLXdpZGUgcHJvcGVydHkgKHNwYWNlIGRlbGltaXRlZCku"/> <L7p:ResponseContentType stringValue="text/plain; charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:All> </wsp:Policy> true name