This message was deleted.
# citrix-netscalers
Slackbot
06/09/2023, 9:12 AMThis message was deleted.
k
Kari Ruissalo (WyW)
06/09/2023, 10:42 AMI would replace that expression just with "true"
Kari Ruissalo (WyW)
06/09/2023, 10:43 AMbecause the aim is to have a "drop all" -rule?
Kari Ruissalo (WyW)
06/09/2023, 10:43 AMand above that you probably would have the rules that allow traffic
Kari Ruissalo (WyW)
06/09/2023, 10:44 AMor even create a "reverse rule" using data/patternset & expressions, where the rule drops everything and the expression is sth like
!whitelist-ip
c
c4rm0
06/09/2023, 11:31 AMI don't really want to change things for this customer as the task paid work was only to convert the existing authorization polices to advanced using the existing expressions which they have no issues with
c4rm0
06/09/2023, 11:33 AMThe classic expression "REQ.IP.destIP == 0.0.0.0 -netmask 0.0.0.0" worked for them but the equivalent in advanced doesn't
j
Jan Tytgat
06/09/2023, 11:50 AMAgree with @Kari Ruissalo (WyW) on this. nspepi will not help you on this, some stuff needs to be changed manually.
c
c4rm0
06/09/2023, 3:53 PMi have created all new authorization polices using advanced expressions and was planning on unbinding the existing classic authorization polices from the AAA groups and binding the new Advanced authorization policies but they wont unbind ? No errors it just doesnt unbind them ? they are bound to the AAA Vserver
c4rm0
06/09/2023, 4:09 PMfound this https://support.citrix.com/article/CTX237000/unable-to-unbind-the-authorization-policies-from-aaa-usergroup but i am on 13.1-45.64
3 Views