Citrix Systems 9.2 How Policy Evaluation Ends

Chapter 2 Configuring Advanced Policies 21
•NEXT. This keyword selects the policy with the next higher priority level
in the current policy bank.
•An integer. If you supply an integer, it must match the priority level of
another policy in the current policy bank.
•END. This keyword stops evaluation after processing the current policy,
and no additional policies in this bank are processed.
•Blank. If the Goto expression is empty, it is the same as specifying END.
•A numeric expression. This is an advanced expression that resolves to a
priority number for another policy in the current bank.
•USE_INVOCATION_RESULT. This phrase can be used only if you are
invoking an external policy bank. Entering this phrase causes the NetScaler
to perform one of the following actions:
• If the final Goto in the invoked policy bank has a value of END or is
empty, the invocation result is END, and evaluation stops.
• If the final Goto expression in the invoked policy bank is anything
other than END, the NetScaler performs a NEXT.
The following table illustrates a policy bank that uses Goto statements and policy
bank invocations.
How Policy Evaluation Ends
Evaluation of a policy bank ends when the following takes place:
Example of a Policy Bank That Uses Gotos and External Bank Invocations
Policy Name Priority Goto Invocation Policy Bank
to be Invoked
ClientCertificatePolicy
(rule: does the request
contain a client certificate?)
100 300 None None
SubnetPolicy (rule: is the
client from a private
subnet?)
200 NEXT None None
NOPOLICY 300 USE
INVOCATION
RESULT
Request
vserver My_Request _VServer
NOPOLICY 350 USE
INVOCATION
RESULT
Policy Label My_Policy_
Label
WorkingHoursPolicy (rule:
is it working hours?) 400 END None None