Blue Coat Systems Understanding the Blue Coat Proxy Client and Its Content Policy Language

ProxySG Content Policy Language Guide

client.address=

Tests the IP address of the client. The expression can include an IP address or subnet or the label of a subnet definition block.

Important: If a user is explicitly proxied to the ProxySG, <Proxy> layer policy applies even if the URL destination is an administrative URL for the ProxySG itself, and should therefore also be covered under <Admin> layer policy. However, when the client.address= trigger is used in an <Admin> layer, clients explicitly proxied to the ProxySG appear to have their client IP address set to the IP address of the ProxySG.

Replaces: client_address=, acl=

Syntax

client.address=ip_addresssubnet_label

where:

•ip_address—Client IP address or subnet specification; for example, 10.25.198.0/24.

•subnet_label—Label of a subnet definition block that binds a number of IP addresses or subnets.

Layer and Transaction Notes

•Can be used in all layers.

•Unavailable if the transaction is not associated with a client.

Examples

;Blacklisted workstation. client.address=10.25.198.0 deny

;This example uses the client address to select the authentication realm for

;administration of the ProxySG.

<admin>

client.address=10.25.198.0/24 authenticate(LDAPRealm) client.address=10.25.199.0/24 authenticate(NTLMRealm) authenticate(LocalRealm) ; Everyone else

See Also

•Conditions: client.protocol=, proxy.address=, proxy.card=, proxy.port=

•Definitions: define subnet

60