Content rule URL matches

[rhholmes]

Is there a way to have a user going to http://www.xxx.com/ redirected to http://www.xxx.com/subdir?

I am trying to match on a domain in a URL statement in a content rule and then have the client redirected to a subdirectory on the same domain. This doesn't appear to work because the redirect string has the same domain and also matches the URL string in the content rule, creating a loop of sorts.

[pknoops]

You should be able to do this as long as you have another L5 content rule with a more specific match with the subdirectory. If you are only using the one content rule, then this will not work and what you are seeing is correct.

Regards

Pete Knoops

Cisco Systems

[rhholmes]

Thought your suggestion would work, but it didn't. Here is the before and after code.

service www_elearning_to_https

ip address 172.20.4.138

keepalive type none

type redirect

no prepend-http

redirect-string https://www.elearning.xxx.ca/sapportal/

active

content www_elearning_to_https

vip address 214.114.133.112

add service www_elearning_to_https

protocol tcp

port 80

url "/*"

active

content www_elearning

vip address 214.114.133.112

add service cwh-ott-nt-019-www_elearning

active

The above works, but fails when the following is added. Shouldn't it match on the URL and permit the traffic to flow?

content www_elearning_sapportal

vip address 214.114.133.112

add service cwh-ott-nt-019-www_elearning

protocol tcp

port 443

url "//www.elearning.xxx.ca/sapportal/*"

active

Thanks.

[d.parks]

I don't think the CSS can match the URL on 443 traffic since the headers are encrypted. There would probably be a way to make it work with the SSL module installed in the CSS though.

[rhholmes]

You are absolutely correct. I know better. Write it off as temporary tunnel vision.

Cheers.

[pknoops]

Your original question did not say https, it said http, so you are unable to do an L5 match as I stated earlier for https, only http as the other person mentioned also.

PEte..