Jump to content
Welcome to our new Citrix community!

Expression Evaluator to match CLIENT.IP.SRC.MATCHES_LOCATION("*.US.*.*.*.*").NOT


Recommended Posts

The expression evaluator cannot test any  client.ip.src expressions as there is no L3 packet info in the test.

The evaluator can test HTTP expressions but will never see client.ip.src stuff as valid even if the expression would in fact work in a real policy.

 

So, set up a simple responder policy test and include a logging action so you can test and confirm the policy hit/expression work as expected.

add responder policy Drop_non_US "CLIENT.IP.SRC.MATCHES_LOCATION(\"*.US.*.*.*.*\").NOT DROP

 

So assuming you've set up the location parameter, then the expressions will work:  https://support.citrix.com/article/CTX130701. Just test these with an actual policy on a test vserver and don't rely on the evaulator.

 

 

 

  • Like 1
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...