Dell SonicWALL Secure Mobile Access 8.5
Administration Guide
302
Table 34. Variables for Use in Rules
Variable Name
Collection
Description
Host
No
Refers to the host name or the IP address in the Host header of an HTTP
request. This typically refers to the host part of the URL in the address
bar of your browser.
URI
No
Refers to the combination of path and the query arguments in a URL.
HTTP Method
No
Refers to the method, such as GET and POST, used by the browser to
request a resource on the Web server.
HTTP Status Code
No
Refers to the response status from the Web server. You can use this to
configure actions for various error codes from the Web server.
Parameter Values
Yes
Refers to the collection of all request parameter values, including the
values of all query arguments and form parameters that are part of the
current request.
To match against some aspect of the entire list of parameter values, such
as the number of parameter values, leave the selection field empty.
To match against the value of a particular parameter, specify the name of
the parameter in the selection field to the right of the colon.
Parameter Names
Yes
Refers to the collection of all request parameter names, including the
names of all query arguments and form parameters that are part of the
current request.
To match against some aspect of the entire list of parameter names, leave
the selection field empty.
To match against the name of a particular parameter, specify the
parameter name in the selection field to the right of the colon.
Remote Address
No
Refers to the client's IP address. This variable allows you to allow or block
access from certain IP addresses.
Request Header
Values
Yes
Refers to the collection of all HTTP(S) request header values for the
current request.
To match against some aspect of the entire list of request header values,
leave the selection field empty.
To match against a particular header value, specify the name of the
header in the selection field to the right of the colon.
For example, to block Ajax requests, select
Request Header Values
as
the Variable, specify
X-Request-With
in the selection text box, and
specify
ajax
in the
Value
field.
Request Header
Names
Yes
Refers to the collection of all HTTP(S) request header names for the
current request.
To match against some aspect of the entire list of request header names,
leave the selection field empty.
To match against a particular header name, specify the name of the
header in the selection field to the right of the colon.
For example, to block requests that are not referred by a trusted host,
select
Request Header Names
as the
Variable
, specify
Referrer
in the
selection text box, enter the host names or IP addresses of the trusted
hosts in the
Value
field, select the
Not
check box and select the
Matches
Keyword
operator.
Response Header
Values
Yes
Refers to the collection of all HTTP(S) response header values for the
current request.
To match against some aspect of the entire list of response header values,
leave the selection field empty.
To match against a particular header value, specify the name of the
header in the selection field to the right of the colon.