Is there any way to use IPRep with CLIENT.PROXY.SR...
# citrix-netscalerj
Jeff Riechers
03/28/2025, 5:43 PMIs there any way to use IPRep with CLIENT.PROXY.SRCIP_STR instead of Client.IP.SRC? The IPREP_IS_MALICIOUS is not a valid suffix. NetScaler is behind an haproxy, and actual client ips are only available inside the proxy portion of the packet.
Jeff Riechers
03/28/2025, 7:49 PMOk, I was able to figure it out. Sometimes just typing the questions here make me think.
(CLIENT.PROXY.SRCIP_STR.TYPECAST_IP_ADDRESS_T.IPREP_IS_MALICIOUS && !(CLIENT.PROXY.SRCIP_STR.TYPECAST_IP_ADDRESS_T.CONTAINS_ANY("Allow_listIP4") || CLIENT.PROXY.SRCIP_STR.TYPECAST_IP_ADDRESS_T.CONTAINS_ANY("Allow_listIP6")))