HTML Extension
Changes all .htm requests to .html
Condition:
Condition = Path
Sense = Does
Check = Match RegEx
Value = \.htm$
Evaluation:
Blank
Action:
Action = Rewrite Path
Target = $path$l
Index.html
Force to use index.html in requests to folders.
Condition: this condition is a general condition that will match most objects
Condition = Host
Sense = Does
Check = Exist
Evaluation:
Blank
Action:
Action = Redirect 302
Target = HTTP://$host$$path$index.html$querystring$
Close Folders
Deny requests to folders.
Condition: this condition is a general condition that will match most objects
Condition = this need proper thought
Sense =
Check =
Evaluation:
Blank
Action:
Action =
Target =
Hide CGI-BBIN:
Hides cgi-bin catalogue in requests to CGI scripts.
Condition: this condition is a general condition that will match most objects
Condition = Host
Sense = Does
Check = Match RegEX
Value = \.cgi$
Evaluation:
Blank
Action:
Action = Rewrite Path
Target = /cgi-bin$path$
Log Spider
Log spider requests of popular search engines.
Condition: this condition is a general condition that will match most objects
Condition = Request Header
Match = User-Agent
Sense = Does
Check = Match RegEX
Value = Googlebot|Slurp|bingbot|ia_archiver
Evaluation:
Variable = $crawler$
Source = Request Header
Detail = User-Agent
Action:
Action = Log Event
Target = [$crawler$] $host$$path$$querystring$
Force HTTPS
Force to use HTTPS for certain directory. In this case if a client is accessing anything containing the /secure/ directory then they will be redirected to the HTTPs version of the URL requested.
Condition:
Condition = Path
Sense = Does
Check = Contain
Value = /secure/
Evaluation:
Blank
Action:
Action = Redirect 302
Target = HTTPs://$host$$path$$querystring$
Media Stream:
Redirects Flash Media Stream to appropriate service.
Condition:
Condition = Path
Sense = Does
Check = End
Value = .flv
Evaluation:
Blank
Action:
Action = Redirect 302
Target = HTTP://$host$:8080/$path$
Swap HTTP to HTTPS
Change any hardcoded HTTP:// to HTTPS://
Condition:
Condition = Response Code
Sense = Does
Check = Equal
Value = 200 OK
Evaluation:
Blank
Action:
Action = Body Replace All
Target = HTTP://
Data = HTTPs://
Blank out Credit Cards
Check that there are no credit cards in the response and if one is found, blank it out.
Condition:
Condition = Response Code
Sense = Does
Check = Equal
Value = 200 OK
Evaluation:
Blank
Action:
Action = Body Replace All
Target = [0-9]+[0-9]+[0-9]+[0-9]+-[0-9]+[0-9]+[0-9]+[0-9]+-[0-9]+[0-9]+[0-9]+[0-9]+-[0-9]+[0-9]+[0-9]+[0-9]+
Data = xxxx-xxxx-xxxx-xxxx
Content Expiry
Add a sensible content expiry date to the page to reduce the number of requests and 304s.
Condition: this is a generic condition as a catch all. It is recommended to focus this condition on your
Condition = Response Code
Sense = Does
Check = Equal
Value = 200 OK
Evaluation:
Blank
Action:
Action = Add Response Header
Target = Cache-Control
Data = max-age=3600
Spoof Server Type
Get the Server type and change it to something else.
Condition: this is a generic condition as a catch all. It is recommended to focus this condition on your
Condition = Response Code
Sense = Does
Check = Equal
Value = 200 OK
Evaluation:
Blank
Action:
Action = Replace Response Header
Target = Server
Data = Secret
Never Send Errors
Client never gets any errors from your site.
Condition
Condition = Response Code
Sense = Does
Check = Contain
Value = 404
Evaluation
Blank
Action
Action = Redirect 302
Target = HTTP//$host$/
Redirect on Language
Find the language code and redirect to the related country domain.
Condition
Condition = Language
Sense = Does
Check = Contain
Value = German (Standard)
Evaluation
Variable = $host_template$
Source = Host
Value = .*\.
Action
Action = Redirect 302
Target = HTTP//$host_template$de$path$$querystring$
Google Analytics
Insert the code required by Google for the analytics – Please change the value MYGOOGLECODE to your Google UA ID.
Condition
Condition = Response Code
Sense = Does
Check = Equal
Value = 200 OK
Evaluation
blank
Action
Action = Body Replace Last
Target = </body>
Data = <script
type=’text/javascript’> var _gaq = _gaq || []; _gaq.push([‘_setAccount’, ‘MY GOOGLE CODE’]); _gaq.push([‘_trackPageview’]); ( function() { var ga = document.createElement(‘script’); ga.type = ‘text/javascript’; ga.async = true; ga.src = (‘HTTPs’ == document.location.protocol ?‘HTTPs//ssl’ ‘HTTP//www’) + ‘.google-analytics.com/ga.js’; var s = document.getElementsByTagName(‘script’)[0];s.parentNode.insertBefore(ga, s); } )(); </script> </body>
IPv6 Gateway
Adjust Host Header for IIS IPv4 Servers on IPv6 Services. IIS IPv4 servers do not like to see an IPV6 address in the host client request so this rule replaces this with a generic name.
Condition
blank
Evaluation
blank
Action
Action = Replace Request Header
Target = Host
Data =ipv4.host.header
SAML and Entra ID
