Dell SMA 200 - Page 302

Dell SonicWALL Secure Mobile Access 8.5
Administration Guide
302
Table 34. Variables for Use in Rules
Variable Name Collection Description
Host No Refers to the host name or the IP address in the Host header of an HTTP
request. This typically refers to the host part of the URL in the address
bar of your browser.
URI No Refers to the combination of path and the query arguments in a URL.
HTTP Method No Refers to the method, such as GET and POST, used by the browser to
request a resource on the Web server.
HTTP Status Code No Refers to the response status from the Web server. You can use this to
configure actions for various error codes from the Web server.
Parameter Values Yes Refers to the collection of all request parameter values, including the
values of all query arguments and form parameters that are part of the
current request.
To match against some aspect of the entire list of parameter values, such
as the number of parameter values, leave the selection field empty.
To match against the value of a particular parameter, specify the name of
the parameter in the selection field to the right of the colon.
Parameter Names Yes Refers to the collection of all request parameter names, including the
names of all query arguments and form parameters that are part of the
current request.
To match against some aspect of the entire list of parameter names, leave
the selection field empty.
To match against the name of a particular parameter, specify the
parameter name in the selection field to the right of the colon.
Remote Address No Refers to the client's IP address. This variable allows you to allow or block
access from certain IP addresses.
Request Header
Values
Yes Refers to the collection of all HTTP(S) request header values for the
current request.
To match against some aspect of the entire list of request header values,
leave the selection field empty.
To match against a particular header value, specify the name of the
header in the selection field to the right of the colon.
For example, to block Ajax requests, select Request Header Values as
the Variable, specify X-Request-With in the selection text box, and
specify ajax in the Value field.
Request Header
Names
Yes Refers to the collection of all HTTP(S) request header names for the
current request.
To match against some aspect of the entire list of request header names,
leave the selection field empty.
To match against a particular header name, specify the name of the
header in the selection field to the right of the colon.
For example, to block requests that are not referred by a trusted host,
select Request Header Names as the Variable, specify Referrer in the
selection text box, enter the host names or IP addresses of the trusted
hosts in the Value field, select the Not check box and select the Matches
Keyword operator.
Response Header
Values
Yes Refers to the collection of all HTTP(S) response header values for the
current request.
To match against some aspect of the entire list of response header values,
leave the selection field empty.
To match against a particular header value, specify the name of the
header in the selection field to the right of the colon.