|
|
@@ -0,0 +1,2764 @@
|
|
|
+# NetScaler Configuration Extractor
|
|
|
+# Note: This script works on Windows 10, but the regex match group commands fail on Windows 7
|
|
|
+
|
|
|
+param (
|
|
|
+ # Full path to source config file saved from NetScaler (System > Diagnostics > Running Configuration)
|
|
|
+ # If set to "", then the script will prompt for the file.
|
|
|
+ [string]$configFile = "",
|
|
|
+ #$configFile = "$env:userprofile\Downloads\nsrunning.conf"
|
|
|
+
|
|
|
+ # Name of vServer - or VIP - case insensitive
|
|
|
+ # Partial match supported - if more than one match, the script will prompt for a selection. Set it to "" to list all vServers.
|
|
|
+ # If vserver name is exact match for one vserver, that vserver will be used, even if it's a substring match for another vserver
|
|
|
+ [string]$vserver = "",
|
|
|
+
|
|
|
+ # Optional filename to save output - file will be overwritten
|
|
|
+ # If you intend to batch import to NetScaler, then no spaces or capital letters in the file name.
|
|
|
+ # If set to "screen", then output will go to screen.
|
|
|
+ # If set to "", then the script will prompt for a file. Clicking cancel will output to the screen.
|
|
|
+ #[string]$outputFile = "",
|
|
|
+ #[string]$outputFile = "screen",
|
|
|
+ [string]$outputFile = "$env:userprofile\Downloads\nsconfig.conf",
|
|
|
+ #[string]$outputFile = "$env:HOME/Downloads/nsconfig.conf",
|
|
|
+
|
|
|
+ # Optional text editor to open saved output file - text editor should handle UNIX line endings (e.g. Wordpad or Notepad++)
|
|
|
+ [string]$textEditor = "notepad++.exe",
|
|
|
+
|
|
|
+ # Optional get CSW vserver Binds for selected LB and/or VPN virtual server
|
|
|
+ [switch]$cswBind,
|
|
|
+
|
|
|
+ # Max # of nFactor Next Factors to extract
|
|
|
+ [int]$nFactorNestingLevel = 5
|
|
|
+)
|
|
|
+
|
|
|
+# Change Log
|
|
|
+# ----------
|
|
|
+# 2024 Sep 25 - added "add monitor" instead of "add lb monitor"
|
|
|
+# 2023 June 30 - added port numbers to VIP list; bug fixes
|
|
|
+# 2022 Sep 20 - added bot management
|
|
|
+# 2022 July 10 - added support for * in object names (e.g., *.corp.com)
|
|
|
+# 2021 Nov 4 - performance improvements
|
|
|
+# 2021 Oct 15 - output SAML SSO Actions; performance improvements
|
|
|
+# 2021 Jun 1 - added search "policy expressions" for other appexpert objects
|
|
|
+# 2021 May 27 - added messageactions to output
|
|
|
+# 2021 Apr 30 - fixed named expressions
|
|
|
+# 2021 Apr 30 - added: get variables from expressions; get variable assignments from responders
|
|
|
+# 2021 Apr 27 - fixed sorting of Backup vServers
|
|
|
+# 2021 Apr 20 - added DISABLED state to VIP selection screen
|
|
|
+# 2021 Feb 5 - fixed TACACS policies and Local Authentication Policies, including global
|
|
|
+# 2020 Dec 7 - added Captcha action and NoAuth action
|
|
|
+# 2020 Dec 7 - added parameter to set nFactor nesting level
|
|
|
+# 2020 Dec 7 - sorted authentication policylabels so NextFactors are created first
|
|
|
+# 2019 Jun 3 - added RNAT; added OTP Push Service; added partitions; added Azure Keys
|
|
|
+# 2019 Apr 22 - added vServer VIP extraction from other commands (e.g. LDAP Action)
|
|
|
+# 2019 Apr 15 - fixed server enumeration
|
|
|
+# 2019 Apr 7 - reordered Policy Expression output
|
|
|
+# 2019 Apr 1 - new "Sys" option to extract System Settings
|
|
|
+# 2019 Mar 6 - fixed Visualizer substring match, and added emailAction
|
|
|
+# 2018 Dec 27 - fix aaa tm trafficpolicy/action aaa kcdAccount output (BKF)
|
|
|
+# 2018 Dec 2 - added nFactor Visualizer for AAA vServers
|
|
|
+# 2018 Nov 19 - MacOS: added List Dialog to select vServers. fix: dialogfocus (BKF)
|
|
|
+# 2018 Nov 17 - changed vServer selection to Out-GridView (GUI)
|
|
|
+# 2018 Nov 16 - support for MacOS popups for nsconf and saveas. Switch for sort to Sort-object to support MacOs & Powershell core 6
|
|
|
+# 2018 Nov 5 - check text editor existince (h/t Bjørn-Kåre Flister)
|
|
|
+# 2018 Nov 5 - switch to extract CS vServer for selected LB/VPN/AAA vServer (h/t Bjørn-Kåre Flister)
|
|
|
+# 2018 Sep 19 - fixed SAML Policy and SAML Action
|
|
|
+# 2018 Sep 11 - parameterized the script, fixed specified vServer
|
|
|
+# 2018 July 22 - added ICA Parameters to VPN Global Settings
|
|
|
+# 2018 July 18 - added preauthentication policy, added AlwaysOn profile
|
|
|
+# 2018 July 12 - added two levels of nFactor NextFactor extraction
|
|
|
+# 2018 July 8 - added DNS configuration to every extraction
|
|
|
+# 2018 July 7 - added GSLB Sites and rpcNodes
|
|
|
+# 2018 July 4 - extract local LB VIPs from Session Action URLs (e.g. StoreFront URL to local LB VIP)
|
|
|
+# 2018 July 3 - extract DNS vServers from "set vpn parameter" and Session Actions
|
|
|
+# 2018 July 3 - added "*" to select all vServers
|
|
|
+# 2018 July 3 - updated for 12.1 (SSL Log Profile, IP Set, Analytics Profile)
|
|
|
+# 2018 Jan 23 - skip gobal cache settings if cache feature is not enabled
|
|
|
+# 2018 Jan 4 - Sirius' Mark Scott added code to browse to open and save files. Added kcdaccounts to extraction.
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+# Start of script code
|
|
|
+cls
|
|
|
+
|
|
|
+# Function to prompt the user for a NetScaler config file.
|
|
|
+# The NetScaler config file can be found in the System > Diagnostics > Running Configuration location in the GUI
|
|
|
+Function Get-InputFile($initialDirectory)
|
|
|
+{
|
|
|
+ if ($IsMacOS){
|
|
|
+ $filename = (('tell application "SystemUIServer"'+"`n"+'activate'+"`n"+'set fileName to POSIX path of (choose file with prompt "NetScaler documentation file")'+"`n"+'end tell' | osascript -s s) -split '"')[1]
|
|
|
+ if ([String]::IsNullOrEmpty($filename)){break}else{$filename}
|
|
|
+ }else{
|
|
|
+ [System.Reflection.Assembly]::LoadWithPartialName("System.windows.forms") | Out-Null
|
|
|
+ $OpenFileDialog = New-Object System.Windows.Forms.OpenFileDialog
|
|
|
+ $OpenFileDialog.Title = "Open NetScaler Config"
|
|
|
+ $OpenFileDialog.initialDirectory = $initialDirectory
|
|
|
+ $OpenFileDialog.filter = "NetScaler Config (*.conf)| *.conf|All files (*.*)|*.*"
|
|
|
+ $OpenFileDialog.ShowDialog() | Out-Null
|
|
|
+ $OpenFileDialog.filename
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+# Function to prompt the user to save the output file
|
|
|
+Function Get-OutputFile($initialDirectory)
|
|
|
+{
|
|
|
+ if ($IsMacOS){
|
|
|
+ $DefaultName = 'default name "nsconfig.conf"'
|
|
|
+ if ($initialDirectory){
|
|
|
+ $DefaultLocation = 'default location "'+$initialDirectory+'"'
|
|
|
+ }
|
|
|
+ $filename = (('tell application "SystemUIServer"'+"`n"+'activate'+"`n"+'set theName to POSIX path of (choose file name '+$($DefaultName)+' '+$($DefaultLocation)+' with prompt "Save NetScaler documentation file as")'+"`n"+'end tell' | osascript -s s) -split '"')[1]
|
|
|
+ $filename
|
|
|
+ }else{
|
|
|
+ [System.Reflection.Assembly]::LoadWithPartialName("System.windows.forms") | Out-Null
|
|
|
+ $SaveFileDialog = New-Object System.Windows.Forms.SaveFileDialog
|
|
|
+ $SaveFileDialog.Title = "Save Extracted Config"
|
|
|
+ $SaveFileDialog.initialDirectory = $initialDirectory
|
|
|
+ $SaveFileDialog.filter = "NetScaler Config File (*.conf)| *.conf|All files (*.*)|*.*"
|
|
|
+ $SaveFileDialog.ShowDialog() | Out-Null
|
|
|
+ $SaveFileDialog.filename
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Run the Get-InputFile function to ask the user for the NetScaler config file
|
|
|
+if (!$configFile) {
|
|
|
+ $configFile = Get-InputFile $inputfile
|
|
|
+}
|
|
|
+if (!$configFile) { exit }
|
|
|
+
|
|
|
+"Loading config file $configFile ...`n"
|
|
|
+
|
|
|
+$config = ""
|
|
|
+$config = Get-Content $configFile -ErrorAction Stop
|
|
|
+
|
|
|
+function printProgress ($origObjects, $NSObjectType) {
|
|
|
+ # Check if anything was added and display
|
|
|
+ $newObjects = @()
|
|
|
+ if (-not $origObjects) {
|
|
|
+ $newObjects = $nsObjects.$NSObjectType
|
|
|
+ } else {
|
|
|
+ $newObjects = (Compare-Object $origObjects $nsObjects.$NSObjectType).InputObject
|
|
|
+ }
|
|
|
+ if ($newObjects)
|
|
|
+ {
|
|
|
+ foreach ($newObject in $newObjects) {
|
|
|
+ write-host (("Found {0,-25} " -f $NSObjectType) + $newObject)
|
|
|
+ }
|
|
|
+ }
|
|
|
+ return $newObjects
|
|
|
+}
|
|
|
+
|
|
|
+# returns a regex clause with multiple objects or'd to speed up regex matching
|
|
|
+function getMatchExpression ($Objects) {
|
|
|
+ # returns a regex clause with multiple objects or'd to speed up regex matching
|
|
|
+ $matchExpression = "("
|
|
|
+ foreach ($uniqueObject in $Objects) {
|
|
|
+ $uniqueObjectDots = $uniqueObject -replace "\.", "\."
|
|
|
+ $uniqueObjectDots = $uniqueObjectDots -replace "\*", "\*"
|
|
|
+ $matchExpression += $uniqueObjectDots + "|"
|
|
|
+ }
|
|
|
+ $matchExpression = $matchExpression.Substring(0,$matchExpression.length - 1) + ")"
|
|
|
+ return $matchExpression
|
|
|
+}
|
|
|
+
|
|
|
+# searches matches for other objects (e.g., pattern set)
|
|
|
+# then adds all matches to the main matches hash table
|
|
|
+function addNSObject ($NSObjectType, $NSObjectName) {
|
|
|
+ if (!$NSObjectName) { return }
|
|
|
+ # write-host $NSObjectType $NSObjectName #Debug
|
|
|
+ if (!$nsObjects.$NSObjectType) { $nsObjects.$NSObjectType = @()}
|
|
|
+ $origObjects = $nsObjects.$NSObjectType
|
|
|
+ $nsObjects.$NSObjectType += $NSObjectName
|
|
|
+ $nsObjects.$NSObjectType = @($nsObjects.$NSObjectType | Select-Object -Unique)
|
|
|
+
|
|
|
+ $newObjects = printProgress $origObjects $NSObjectType
|
|
|
+ if (!$newObjects) {return}
|
|
|
+
|
|
|
+ # Get Filtered Config for the object being added to check for policy sub-objects
|
|
|
+ # Don't match "-" to prevent "add serviceGroup -netProfile"
|
|
|
+ # Ensure there's whitespace before match to prevent substring matches (e.g. server matching MyServer)
|
|
|
+
|
|
|
+ $filteredConfig = ""
|
|
|
+
|
|
|
+ $matchExpression = getMatchExpression $newObjects
|
|
|
+ $filteredConfig = $config -match "[^-\S]" + $NSObjectType + " " + $matchExpression + "[^\S]"
|
|
|
+ if (!$filteredConfig) {$filteredConfig = $uniqueObject}
|
|
|
+
|
|
|
+ # Look in expressions for other objects
|
|
|
+ if ($filteredConfig -match '["|(]' ) {
|
|
|
+ # Look for Pattern Sets
|
|
|
+ $foundObjects = getNSObjects $filteredConfig "policy patset"
|
|
|
+ if ($foundObjects) {
|
|
|
+ $origObjects = $nsObjects."policy patset"
|
|
|
+ $nsObjects."policy patset" += $foundObjects
|
|
|
+ $nsObjects."policy patset" = @($nsObjects."policy patset" | Select-Object -Unique)
|
|
|
+ $newObjects = printProgress $origObjects "policy patset"
|
|
|
+ }
|
|
|
+
|
|
|
+ # Look for Data Sets
|
|
|
+ $foundObjects = getNSObjects $filteredConfig "policy dataset"
|
|
|
+ if ($foundObjects) {
|
|
|
+ $nsObjects."policy dataset" += $foundObjects
|
|
|
+ $nsObjects."policy dataset" = @($nsObjects."policy dataset" | Select-Object -Unique)
|
|
|
+ }
|
|
|
+
|
|
|
+ # Look for String Maps
|
|
|
+ $foundObjects = getNSObjects $filteredConfig "policy stringmap"
|
|
|
+ if ($foundObjects) {
|
|
|
+ $nsObjects."policy stringmap" += $foundObjects
|
|
|
+ $nsObjects."policy stringmap" = @($nsObjects."policy stringmap" | Select-Object -Unique)
|
|
|
+ }
|
|
|
+
|
|
|
+ # Look for URL Sets
|
|
|
+ $foundObjects = getNSObjects $filteredConfig "policy urlset"
|
|
|
+ if ($foundObjects) {
|
|
|
+ $nsObjects."policy urlset" += $foundObjects
|
|
|
+ $nsObjects."policy urlset" = @($nsObjects."policy urlset" | Select-Object -Unique)
|
|
|
+ }
|
|
|
+
|
|
|
+ # Look for Expressions
|
|
|
+ $foundObjects = getNSObjects $filteredConfig "policy expression"
|
|
|
+ if ($foundObjects) {
|
|
|
+ addNsObject "policy expression" $foundObjects
|
|
|
+ #$nsObjects."policy expression" += $foundObjects
|
|
|
+ #$nsObjects."policy expression" = @($nsObjects."policy expression" | Select-Object -Unique)
|
|
|
+ }
|
|
|
+
|
|
|
+ # Look for Variables
|
|
|
+ $foundObjects = getNSObjects $filteredConfig "ns variable"
|
|
|
+ if ($foundObjects) {
|
|
|
+ $nsObjects."ns variable" += $foundObjects
|
|
|
+ $nsObjects."ns variable" = @($nsObjects."ns variable" | Select-Object -Unique)
|
|
|
+ }
|
|
|
+
|
|
|
+ # Look for Policy Maps
|
|
|
+ $foundObjects = getNSObjects $filteredConfig "policy map"
|
|
|
+ if ($foundObjects) {
|
|
|
+ $nsObjects."policy map" += $foundObjects
|
|
|
+ $nsObjects."policy map" = @($nsObjects."policy map" | Select-Object -Unique)
|
|
|
+ }
|
|
|
+
|
|
|
+ # Look for Limit Identifiers
|
|
|
+ $foundObjects = getNSObjects $filteredConfig "ns limitIdentifier"
|
|
|
+ if ($foundObjects) {
|
|
|
+ $nsObjects."ns limitIdentifier" += $foundObjects
|
|
|
+ $nsObjects."ns limitIdentifier" = @($nsObjects."ns limitIdentifier" | Select-Object -Unique)
|
|
|
+ }
|
|
|
+
|
|
|
+ # Look for Stream Identifiers
|
|
|
+ $foundObjects = getNSObjects $filteredConfig "stream identifier"
|
|
|
+ if ($foundObjects) {
|
|
|
+ $nsObjects."stream identifier" += $foundObjects
|
|
|
+ $nsObjects."stream identifier" = @($nsObjects."stream identifier" | Select-Object -Unique)
|
|
|
+ }
|
|
|
+
|
|
|
+ # Look for Policy Extensions
|
|
|
+ $foundObjects = getNSObjects $filteredConfig "ns extension"
|
|
|
+ if ($foundObjects) {
|
|
|
+ $origObjects = $nsObjects."ns extension"
|
|
|
+ $nsObjects."ns extension" += $foundObjects
|
|
|
+ $nsObjects."ns extension" = @($nsObjects."ns extension" | Select-Object -Unique)
|
|
|
+ printProgress $origObjects "ns extension"
|
|
|
+ }
|
|
|
+
|
|
|
+ # Look for Callouts
|
|
|
+ if ($filteredConfig -match "CALLOUT") {
|
|
|
+ if (!$nsObjects."policy httpCallout") { $nsObjects."policy httpCallout" = @()}
|
|
|
+ $nsObjects."policy httpCallout" += getNSObjects $filteredConfig "policy httpCallout"
|
|
|
+ $nsObjects."policy httpCallout" = @($nsObjects."policy httpCallout" | Select-Object -Unique)
|
|
|
+ }
|
|
|
+
|
|
|
+ # Look for DNS Records
|
|
|
+ $foundObjects = getNSObjects $filteredConfig "dns addRec"
|
|
|
+ if ($foundObjects)
|
|
|
+ {
|
|
|
+ $nsObjects."dns addRec" += $foundObjects
|
|
|
+ $nsObjects."dns addRec" = @($nsObjects."dns addRec" | Select-Object -Unique)
|
|
|
+ }
|
|
|
+ $foundObjects = getNSObjects $filteredConfig "dns nsRec"
|
|
|
+ if ($foundObjects)
|
|
|
+ {
|
|
|
+ $nsObjects."dns nsRec" += $foundObjects
|
|
|
+ $nsObjects."dns nsRec" = @($nsObjects."dns nsRec" | Select-Object -Unique)
|
|
|
+ }
|
|
|
+
|
|
|
+ # Look for vServer VIPs
|
|
|
+ if ($filteredConfig -match "\d+\.\d+\.\d+\.\d+" -and $NSObjectType -notmatch " vserver") {
|
|
|
+ $objectsToAdd = getNSObjects $filteredConfig "lb vserver"
|
|
|
+ if ($objectsToAdd) {
|
|
|
+ if (!$nsObjects."lb vserver") { $nsObjects."lb vserver" = @()}
|
|
|
+ $nsObjects."lb vserver" += getNSObjects $filteredConfig "lb vserver"
|
|
|
+ $nsObjects."lb vserver" = @($nsObjects."lb vserver" | Select-Object -Unique)
|
|
|
+ GetLBvServerBindings $objectsToAdd
|
|
|
+ }
|
|
|
+
|
|
|
+ $objectsToAdd = getNSObjects $filteredConfig "cs vserver"
|
|
|
+ if ($objectsToAdd) {
|
|
|
+ if (!$nsObjects."cs vserver") { $nsObjects."cs vserver" = @()}
|
|
|
+ $nsObjects."cs vserver" += getNSObjects $filteredConfig "cs vserver"
|
|
|
+ $nsObjects."cs vserver" = @($nsObjects."cs vserver" | Select-Object -Unique)
|
|
|
+ }
|
|
|
+
|
|
|
+ $objectsToAdd = getNSObjects $filteredConfig "vpn vserver"
|
|
|
+ if ($objectsToAdd) {
|
|
|
+ if (!$nsObjects."vpn vserver") { $nsObjects."vpn vserver" = @()}
|
|
|
+ $nsObjects."vpn vserver" += getNSObjects $filteredConfig "vpn vserver"
|
|
|
+ $nsObjects."vpn vserver" = @($nsObjects."vpn vserver" | Select-Object -Unique)
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Search for objects of type bound to selected vservers
|
|
|
+function getNSObjects ($matchConfig, $NSObjectType, $paramName, $position) {
|
|
|
+ if ($paramName -and !($matchConfig -match $paramName)) {
|
|
|
+ return
|
|
|
+ }
|
|
|
+
|
|
|
+ # Read all objects of type from from full config
|
|
|
+ # Cache objects to speed up multiple iterations of this function
|
|
|
+ if ($nsObjectsCache.$NSObjectType) {
|
|
|
+ $objectsAll = $nsObjectsCache.$NSObjectType
|
|
|
+ } else {
|
|
|
+ $objectsAll = $config | select-string -Pattern ('^(add|set|bind) ' + $NSObjectType + ' (".*?"|[^-"]\S+)($| )') | ForEach-Object {$_.Matches.Groups[2].value}
|
|
|
+ $objectsAll = $objectsAll | Where-Object { $nsObjects.$NSObjectType -notcontains $_ }
|
|
|
+ $objectsAll = $objectsAll | sort-object -Unique
|
|
|
+ $nsObjectsCache.$NSObjectType = $objectsAll
|
|
|
+ }
|
|
|
+
|
|
|
+ if ($objectsAll.length -eq 0) {return}
|
|
|
+
|
|
|
+ # if looking for matching vServers, also match on VIPs
|
|
|
+ if ($NSObjectType -match " vserver") {
|
|
|
+ $VIPsAll = $config | select-string -Pattern ('^add ' + $NSObjectType + ' (".*?"|[^-"]\S+) \S+ (\d+\.\d+\.\d+\.\d+) (\d+)') | ForEach-Object {
|
|
|
+ @{
|
|
|
+ VIP = $_.Matches.Groups[2].value
|
|
|
+ Name = $_.Matches.Groups[1].value
|
|
|
+ Port = $_.Matches.Groups[3].value
|
|
|
+ }
|
|
|
+ }
|
|
|
+ $VIPsAll = $VIPsAll | Where-Object {$_.VIP -ne "0.0.0.0"}
|
|
|
+ }
|
|
|
+
|
|
|
+ # if ($NSObjectType -match "ssl certKey")
|
|
|
+ # { write-host $objectCandidate}
|
|
|
+
|
|
|
+ # Strip Comments
|
|
|
+ $matchConfig = $matchConfig | ForEach-Object {$_ -replace '-comment ".*?"' }
|
|
|
+
|
|
|
+ # Build Position matching string - match objectCandidate after the # of positions - avoids Action name matching Policy name
|
|
|
+ if ($position) {
|
|
|
+ $positionString = ""
|
|
|
+ 1..($position) | ForEach-Object {
|
|
|
+ $positionString += '(".*?"|[^"]\S+) '
|
|
|
+ }
|
|
|
+ $positionString += ".* "
|
|
|
+ }
|
|
|
+
|
|
|
+ # Match objects to matchConfig
|
|
|
+ # optional searchHint helps prevent too many matches (e.g. "tcp")
|
|
|
+ $objectMatches = @()
|
|
|
+ foreach ($objectCandidate in $objectsAll) {
|
|
|
+
|
|
|
+ # For regex, replace dots with escaped dots and escaped *
|
|
|
+ $objectCandidateDots = $objectCandidate -replace "\.", "\."
|
|
|
+ $objectCandidateDots = $objectCandidateDots -replace "\*", "\*"
|
|
|
+
|
|
|
+
|
|
|
+ # Trying to avoid substring matches
|
|
|
+ if ($paramName) {
|
|
|
+ # Compare candidate to term immediately following parameter name
|
|
|
+ if (($matchConfig -match ($paramName + " " + $objectCandidateDots + "$" )) -or ($matchConfig -match ($paramName + " " + $objectCandidateDots + " "))) {
|
|
|
+ $objectMatches += $objectCandidate
|
|
|
+ }
|
|
|
+ } elseif ($position) {
|
|
|
+ # Compare candidate to all terms after the specified position # - avoids action name matching policy name
|
|
|
+ if (($matchConfig -match ($positionString + $objectCandidateDots + "$")) -or ($matchConfig -match ($positionString + $objectCandidateDots + " "))) {
|
|
|
+ $objectMatches += $objectCandidate
|
|
|
+ # if ($objectCandidate -match "storefront") { write-host $objectCandidate;write-host ($matchConfig);read-host}
|
|
|
+ }
|
|
|
+ } elseif (($matchConfig -match (" " + $objectCandidateDots + "$")) -or ($matchConfig -match (" " + $objectCandidateDots + " "))) {
|
|
|
+ # Look for candidate at end of string, or with spaces surrounding it - avoids substring matches
|
|
|
+
|
|
|
+ $objectMatches += $objectCandidate
|
|
|
+ } elseif (($matchConfig -match ('"' + $objectCandidateDots + '\\"')) -or ($matchConfig -match ('\(' + $objectCandidateDots + '\)"'))) {
|
|
|
+ # Look for AppExpert objects (e.g. policy sets, callouts) in policy expressions that don't have spaces around it
|
|
|
+
|
|
|
+ $objectMatches += $objectCandidate
|
|
|
+ } elseif (($matchConfig -match ('//' + $objectCandidateDots)) -or ($matchConfig -match ($objectCandidateDots + ':'))) {
|
|
|
+ # Look in URLs for DNS records
|
|
|
+
|
|
|
+ $objectMatches += $objectCandidate
|
|
|
+ } elseif (($matchConfig -match ('\.' + $objectCandidateDots + '(\.|"|\(| )'))) {
|
|
|
+ # Look in Policy Expressions for Policy Extensions - .extension. or .extension" or .extension( or .extension
|
|
|
+
|
|
|
+ $objectMatches += $objectCandidate
|
|
|
+ } elseif (($NSObjectType -match "variable") -and ($matchConfig -match ('\$' + $objectCandidateDots))) {
|
|
|
+ # Look for variables
|
|
|
+
|
|
|
+ $objectMatches += $objectCandidate
|
|
|
+ } elseif (($NSObjectType -match "expression") -and (($matchConfig -match ($objectCandidateDots + "\.") -or ($matchConfig -match ($objectCandidateDots + '\"'))))) {
|
|
|
+ # Look for named expressions that have dot operators after it
|
|
|
+
|
|
|
+ $objectMatches += $objectCandidate
|
|
|
+ }
|
|
|
+
|
|
|
+ }
|
|
|
+
|
|
|
+ foreach ($VIP in $VIPsAll) {
|
|
|
+
|
|
|
+ # For regex, replace dots with escaped dots
|
|
|
+ $VIPDots = $VIP.VIP -replace "\.", "\."
|
|
|
+
|
|
|
+ # Trying to avoid substring matches
|
|
|
+ if ($paramName) {
|
|
|
+ # Compare candidate to term immediately following parameter name
|
|
|
+ if (($matchConfig -match ($paramName + " " + $VIPDots + "$" )) -or ($matchConfig -match ($paramName + " " + $VIPDots + " "))) {
|
|
|
+ if ($matchConfig -match $VIP.Port) { $objectMatches += $VIP.Name }
|
|
|
+ }
|
|
|
+ } elseif ($position) {
|
|
|
+ # Compare candidate to all terms after the specified position # - avoids action name matching policy name
|
|
|
+ if (($matchConfig -match ($positionString + $VIPDots + "$")) -or ($matchConfig -match ($positionString + $VIPDots + " "))) {
|
|
|
+ if ($matchConfig -match $VIP.Port) { $objectMatches += $VIP.Name }
|
|
|
+ }
|
|
|
+ } elseif (($matchConfig -match (" " + $VIPDots + "$")) -or ($matchConfig -match (" " + $VIPDots + " "))) {
|
|
|
+ # Look for candidate at end of string, or with spaces surrounding it - avoids substring matches
|
|
|
+
|
|
|
+ if ($matchConfig -match $VIP.Port) { $objectMatches += $VIP.Name }
|
|
|
+ } elseif (($matchConfig -match ('"' + $VIPDots + '\\"')) -or ($matchConfig -match ('\(' + $VIPDots + '\)"'))) {
|
|
|
+ # Look for AppExpert objects (e.g. policy sets, callouts) in policy expressions that don't have spaces around it
|
|
|
+
|
|
|
+ if ($matchConfig -match $VIP.Port) { $objectMatches += $VIP.Name }
|
|
|
+ } elseif (($matchConfig -match ('//' + $VIPDots)) -or ($matchConfig -match ($VIPDots + ':'))) {
|
|
|
+ # Look in URLs for DNS records
|
|
|
+
|
|
|
+ if ($matchConfig -match $VIP.Port) { $objectMatches += $VIP.Name }
|
|
|
+ } elseif (($matchConfig -match ('\.' + $VIPDots + '(\.|"|\(| )'))) {
|
|
|
+ # Look in Policy Expressions for Policy Extensions - .extension. or .extension" or .extension( or .extension
|
|
|
+
|
|
|
+ if ($matchConfig -match $VIP.Port) { $objectMatches += $VIP.Name }
|
|
|
+ }
|
|
|
+
|
|
|
+ }
|
|
|
+
|
|
|
+ return $objectMatches
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+function GetLBvServerBindings ($objectsList) {
|
|
|
+
|
|
|
+ $matchExpression = getMatchExpression $objectsList
|
|
|
+ #foreach ($lbvserver in $objectsList) {
|
|
|
+ $vserverConfig = $config -match " lb vserver $matchExpression "
|
|
|
+ addNSObject "service" (getNSObjects $vserverConfig "service")
|
|
|
+ if ($NSObjects.service) {
|
|
|
+ $serviceMatchExpression = getMatchExpression $NSObjects.service
|
|
|
+ #foreach ($service in $NSObjects.service) {
|
|
|
+ # wrap config matches in spaces to avoid substring matches
|
|
|
+ $serviceConfig = $config -match " service $serviceMatchExpression "
|
|
|
+ addNSObject "monitor" (getNSObjects $serviceConfig "lb monitor" "-monitorName")
|
|
|
+ addNSObject "monitor" (getNSObjects $serviceConfig "monitor" "-monitorName")
|
|
|
+ addNSObject "server" (getNSObjects $serviceConfig "server")
|
|
|
+ addNSObject "ssl profile" (getNSObjects $serviceConfig "ssl profile")
|
|
|
+ addNSObject "netProfile" (getNSObjects $serviceConfig "netProfile" "-netProfile")
|
|
|
+ addNSObject "ns trafficDomain" (getNSObjects $serviceConfig "ns trafficDomain" "-td")
|
|
|
+ addNSObject "ns httpProfile" (getNSObjects $serviceConfig "ns httpProfile" "-httpProfileName")
|
|
|
+ addNSObject "ssl cipher" (getNSObjects $serviceConfig "ssl cipher")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects $serviceConfig "ssl certKey" "-certkeyName")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects $serviceConfig "ssl certKey" "-cacert")
|
|
|
+ #}
|
|
|
+ }
|
|
|
+ addNSObject "serviceGroup" (getNSObjects $vserverConfig "serviceGroup")
|
|
|
+ if ($NSObjects.serviceGroup) {
|
|
|
+ $serviceGrouMatchExpression = getMatchExpression $NSObjects.serviceGroup
|
|
|
+ #foreach ($serviceGroup in $NSObjects.serviceGroup) {
|
|
|
+ $serviceConfig = $config -match " serviceGroup $serviceGrouMatchExpression "
|
|
|
+ addNSObject "monitor" (getNSObjects $serviceConfig "lb monitor" "-monitorName")
|
|
|
+ addNSObject "monitor" (getNSObjects $serviceConfig "monitor" "-monitorName")
|
|
|
+ addNSObject "server" (getNSObjects $serviceConfig "server")
|
|
|
+ addNSObject "ssl profile" (getNSObjects $serviceConfig "ssl profile")
|
|
|
+ addNSObject "netProfile" (getNSObjects $serviceConfig "netProfile" "-netProfile")
|
|
|
+ addNSObject "ns trafficDomain" (getNSObjects $serviceConfig "ns trafficDomain" "-td")
|
|
|
+ addNSObject "ns httpProfile" (getNSObjects $serviceConfig "ns httpProfile" "-httpProfileName")
|
|
|
+ addNSObject "ssl cipher" (getNSObjects $serviceConfig "ssl cipher")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects $serviceConfig "ssl certKey" "-certkeyName")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects $serviceConfig "ssl certKey" "-cacert")
|
|
|
+ #}
|
|
|
+ }
|
|
|
+ addNSObject "netProfile" (getNSObjects $vserverConfig "netProfile" "-netProfile")
|
|
|
+ addNSObject "ns trafficDomain" (getNSObjects $vserverConfig "ns trafficDomain" "-td")
|
|
|
+ addNSObject "authentication vserver" (getNSObjects $vserverConfig "authentication vserver" "-authnVsName")
|
|
|
+ addNSObject "authentication authnProfile" (getNSObjects $vserverConfig "authentication authnProfile" "-authnProfile")
|
|
|
+ addNSObject "authorization policylabel" (getNSObjects $vserverConfig "authorization policylabel")
|
|
|
+ addNSObject "authorization policy" (getNSObjects $vserverConfig "authorization policy" "-policyName")
|
|
|
+ addNSObject "ssl policy" (getNSObjects $vserverConfig "ssl policy" "-policyName")
|
|
|
+ addNSObject "ssl cipher" (getNSObjects $vserverConfig "ssl cipher" "-cipherName")
|
|
|
+ addNSObject "ssl profile" (getNSObjects $vserverConfig "ssl profile")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects $vserverConfig "ssl certKey" "-certkeyName")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects $vserverConfig "ssl certKey" "-cacert")
|
|
|
+ addNSObject "ssl vserver" (getNSObjects ($config -match "ssl vserver $matchExpression ") "ssl vserver")
|
|
|
+ addNSObject "responder policy" (getNSObjects $vserverConfig "responder policy" "-policyName")
|
|
|
+ addNSObject "responder policylabel" (getNSObjects $vserverConfig "responder policylabel" "policylabel")
|
|
|
+ addNSObject "rewrite policy" (getNSObjects $vserverConfig "rewrite policy" "-policyName")
|
|
|
+ addNSObject "rewrite policylabel" (getNSObjects $vserverConfig "rewrite policylabel" "policylabel")
|
|
|
+ addNSObject "cache policy" (getNSObjects $vserverConfig "cache policy" "-policyName")
|
|
|
+ addNSObject "cache policylabel" (getNSObjects $vserverConfig "cache policylabel")
|
|
|
+ addNSObject "cmp policy" (getNSObjects $vserverConfig "cmp policy" "-policyName")
|
|
|
+ addNSObject "cmp policylabel" (getNSObjects $vserverConfig "cmp policylabel" "policylabel")
|
|
|
+ addNSObject "appqoe policy" (getNSObjects $vserverConfig "appqoe policy" "-policyName")
|
|
|
+ addNSObject "appflow policy" (getNSObjects $vserverConfig "appflow policy" "-policyName")
|
|
|
+ addNSObject "appflow policylabel" (getNSObjects $vserverConfig "appflow policylabel" "policylabel")
|
|
|
+ addNSObject "appfw policy" (getNSObjects $vserverConfig "appfw policy" "-policyName")
|
|
|
+ addNSObject "appfw policylabel" (getNSObjects $vserverConfig "appfw policylabel" "policylabel")
|
|
|
+ addNSObject "filter policy" (getNSObjects $vserverConfig "filter policy" "-policyName")
|
|
|
+ addNSObject "bot policy" (getNSObjects $vserverConfig "bot policy")
|
|
|
+ addNSObject "transform policy" (getNSObjects $vserverConfig "transform policy" "-policyName")
|
|
|
+ addNSObject "transform policylabel" (getNSObjects $vserverConfig "transform policylabel")
|
|
|
+ addNSObject "tm trafficPolicy" (getNSObjects $vserverConfig "tm trafficPolicy" "-policyName")
|
|
|
+ addNSObject "feo policy" (getNSObjects $vserverConfig "feo policy" "-policyName")
|
|
|
+ addNSObject "spillover policy" (getNSObjects $vserverConfig "spillover policy" "-policyName")
|
|
|
+ addNSObject "audit syslogPolicy" (getNSObjects $vserverConfig "audit syslogPolicy" "-policyName")
|
|
|
+ addNSObject "audit nslogPolicy" (getNSObjects $vserverConfig "audit nslogPolicy" "-policyName")
|
|
|
+ addNSObject "bot policy" (getNSObjects $vserverConfig "bot policy")
|
|
|
+ addNSObject "dns profile" (getNSObjects $vserverConfig "dns profile" "-dnsProfileName" )
|
|
|
+ addNSObject "ns tcpProfile" (getNSObjects $vserverConfig "ns tcpProfile" "-tcpProfileName")
|
|
|
+ addNSObject "ns httpProfile" (getNSObjects $vserverConfig "ns httpProfile" "-httpProfileName")
|
|
|
+ addNSObject "db dbProfile" (getNSObjects $vserverConfig "db dbProfile" "-dbProfileName")
|
|
|
+ addNSObject "lb profile" (getNSObjects $vserverConfig "lb profile" "-lbprofilename")
|
|
|
+ addNSObject "ipset" (getNSObjects $vserverConfig "ipset" "-ipset")
|
|
|
+ addNSObject "authentication adfsProxyProfile" (getNSObjects $vserverConfig "authentication adfsProxyProfile" "-adfsProxyProfile")
|
|
|
+ #}
|
|
|
+
|
|
|
+}
|
|
|
+
|
|
|
+function getHttpVServer ($matchConfig) {
|
|
|
+ # Matches local LB/CS vServer VIPs in URLs (e.g. StoreFront URL) - No FQDN support
|
|
|
+
|
|
|
+ # Read all LB/CS objects of protocol HTTP/SSL from from full config. Extract Name, IP, and Port
|
|
|
+ if ($matchConfig -match "http://")
|
|
|
+ {
|
|
|
+ $objectsAll = $config | select-string -Pattern '^add (lb|cs) vserver (".*?"|[^-"]\S+) HTTP (\d+\.\d+.\d+\.\d+) (\d+) ' | ForEach-Object { New-Object PSObject -property @{
|
|
|
+ Name = $_.Matches.Groups[2].value
|
|
|
+ IP = $_.Matches.Groups[3].value
|
|
|
+ Port = $_.Matches.Groups[4].value
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+ elseif ($matchConfig -match "https://")
|
|
|
+ {
|
|
|
+ $objectsAll = $config | select-string -Pattern '^add (lb|cs) vserver (".*?"|[^-"]\S+) SSL (\d+\.\d+.\d+\.\d+) (\d+)' | ForEach-Object { New-Object PSObject -property @{
|
|
|
+ Name = $_.Matches.Groups[2].value
|
|
|
+ IP = $_.Matches.Groups[3].value
|
|
|
+ Port = $_.Matches.Groups[4].value
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ # Check URL for matching VIP and/or Port number
|
|
|
+ $objectMatches = @()
|
|
|
+ foreach ($objectCandidate in $objectsAll)
|
|
|
+ {
|
|
|
+ if ($matchConfig -match $objectCandidate.IP)
|
|
|
+ {
|
|
|
+ if ($matchConfig -match ":\d+/")
|
|
|
+ {
|
|
|
+ if ($matchConfig -match (":" + $objectCandidate.Port + "/"))
|
|
|
+ {
|
|
|
+ $objectMatches += $objectCandidate.Name
|
|
|
+ }
|
|
|
+ }
|
|
|
+ elseif ($objectCandidate.Port -eq "80" -or $objectCandidate.Port -eq "443")
|
|
|
+ {
|
|
|
+ $objectMatches += $objectCandidate.Name
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ return $objectMatches
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+function outputnFactorPolicies ($bindingType, $indent) {
|
|
|
+ $matchedConfig = @()
|
|
|
+ $loginSchemaProfile = $config | select-string -Pattern ('^add ' + $bindingType + ' -loginSchema (".*?"|[^-"]\S+)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ if ($loginSchemaProfile) {
|
|
|
+ $matchedConfig += $linePrefix + ($spacing * ($indent)) + "Login Schema Profile = " + $loginSchemaProfile
|
|
|
+ $loginSchemaProfile = $config -match '^add authentication loginSchema ' + $loginSchemaProfile + " "
|
|
|
+ $loginSchemaXML = $loginSchemaProfile | select-string -Pattern ('-authenticationSchema (".*?"|[^-"]\S+)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ if ($loginSchemaXML) {
|
|
|
+ $matchedConfig += $linePrefix + ($spacing * ($indent)) + "Login Schema XML = " + $loginSchemaXML
|
|
|
+ }
|
|
|
+ }
|
|
|
+ $policies = $config | select-string -Pattern ('^bind ' + $bindingType + ' -(policy|policyName|loginSchema) (".*?"|[^-"]\S+)($| )') | ForEach-Object {$_.Matches.Groups[2].value}
|
|
|
+ foreach ($policy in $policies) {
|
|
|
+ $policyBinding = $config -match ('^bind ' + $bindingType + " -(policy|policyName|loginSchema) " + $policy + " ")
|
|
|
+ $priority = $policyBinding | select-string -Pattern ('-priority (\d+)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ $goto = $policyBinding | select-string -Pattern ('-gotoPriorityExpression (\S+)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ $loginSchemaPolicy = $config -match '^add authentication loginSchemaPolicy ' + $policy + " "
|
|
|
+ if ($loginSchemaPolicy) {
|
|
|
+ $loginSchemaAction = $loginSchemaPolicy | select-string -Pattern ('-action (".*?"|[^-"]\S+)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ $rule = $loginSchemaPolicy | select-string -Pattern ('-rule (.*?) -action') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ $matchedConfig += $linePrefix + ($spacing * $indent) + "Login Schema Policy = " + $policy
|
|
|
+ $matchedConfig += $linePrefix + ($spacing * ($indent + 1)) + "Priority = " + $priority
|
|
|
+ $matchedConfig += $linePrefix + ($spacing * ($indent + 1)) + "Rule = " + $rule
|
|
|
+ $loginSchemaProfile = $config -match '^add authentication loginSchema ' + $loginSchemaAction + " "
|
|
|
+ if ($loginSchemaProfile) {
|
|
|
+ $loginSchemaXML = $loginSchemaProfile | select-string -Pattern ('-authenticationSchema (".*?"|[^-"]\S+)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ $matchedConfig += $linePrefix + ($spacing * ($indent + 1)) + "Login Schema XML = " + $loginSchemaXML
|
|
|
+ }
|
|
|
+ }
|
|
|
+ $authPolicy = $config -match '^add authentication Policy ' + $policy + ' '
|
|
|
+ if ($authPolicy) {
|
|
|
+ $authAction = $authPolicy | select-string -Pattern ('-action (".*?"|[^-"]\S+)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ $authActionConfig = $config -match '^add authentication \w+?Action ' + $authAction + " "
|
|
|
+ $AAAGroup = $authActionConfig | select-string -Pattern ('-defaultAuthenticationGroup (".*?"|[^-"]\S+)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ $authType = $authActionConfig | select-string -Pattern ('^add authentication (\w+?Action)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ $rule = $authPolicy | select-string -Pattern ('-rule (.*?) -action') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ $nextFactor = $policyBinding | select-string -Pattern ('-nextFactor (".*?"|[^-"]\S+)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ $matchedConfig += $linePrefix + ($spacing * $indent) + "Adv Authn Policy = " + $policy
|
|
|
+ $matchedConfig += $linePrefix + ($spacing * ($indent + 1)) + "Priority = " + $priority
|
|
|
+ $matchedConfig += $linePrefix + ($spacing * ($indent + 1)) + "Rule = " + $rule
|
|
|
+ if ($authType) {
|
|
|
+ $matchedConfig += $linePrefix + ($spacing * ($indent + 1)) + "Action = " + $authType + " named " + $authAction
|
|
|
+ } else {
|
|
|
+ $matchedConfig += $linePrefix + ($spacing * ($indent + 1)) + "Action = " + $authAction
|
|
|
+ }
|
|
|
+ if ($AAAGroup) {
|
|
|
+ $matchedConfig += $linePrefix + ($spacing * ($indent + 1)) + "AAA Group = " + $AAAGroup
|
|
|
+ }
|
|
|
+ $matchedConfig += $linePrefix + ($spacing * ($indent + 1)) + "Goto if failed = " + $goto
|
|
|
+ if ($nextFactor) {
|
|
|
+ $matchedConfig += $linePrefix + ($spacing * ($indent + 1)) + "Next Factor if Success = " + $nextFactor
|
|
|
+ $matchedConfig += outputnFactorPolicies ('authentication policylabel ' + $nextFactor) ($indent + 2)
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+ return $matchedConfig
|
|
|
+}
|
|
|
+
|
|
|
+function outputObjectConfig ($header, $NSObjectKey, $NSObjectType, $explainText) {
|
|
|
+ $uniqueObjects = $NSObjects.$NSObjectKey | Select-Object -Unique
|
|
|
+
|
|
|
+ # Build header line
|
|
|
+ $output = "# " + $header + "`n# "
|
|
|
+ 1..$header.length | ForEach-Object {$output += "-"}
|
|
|
+ $output += "`n"
|
|
|
+
|
|
|
+ $matchedConfig = @()
|
|
|
+ if ($NSObjectType -eq "raw") {
|
|
|
+ # Print actual Object Values. Don't get output from filtered config.
|
|
|
+ $matchedConfig = $NSObjects.$NSObjectKey + "`n"
|
|
|
+ } else {
|
|
|
+ foreach ($uniqueObject in $uniqueObjects) {
|
|
|
+
|
|
|
+ # For regex, replace dots with escaped dots and escaped *
|
|
|
+ $uniqueObject = $uniqueObject -replace "\.", "\."
|
|
|
+ $uniqueObject = $uniqueObject -replace "\*", "\*"
|
|
|
+
|
|
|
+ # Don't match "-" to prevent "add serviceGroup -netProfile"
|
|
|
+ # Ensure there's whitespace before match to prevent substring matches (e.g. MyServer matching server)
|
|
|
+ if ($NSObjectType) {
|
|
|
+ # Optional $NSObjectType overrides $NSObjectKey if they don't match (e.g. CA Cert doesn't match certKey)
|
|
|
+ $matchedConfig += $config -match "[^-\S]" + $NSObjectType + " " + $uniqueObject + "$"
|
|
|
+ $matchedConfig += $config -match "[^-\S]" + $NSObjectType + " " + $uniqueObject + "[^\S]"
|
|
|
+ } else {
|
|
|
+ $matchedConfig += $config -match "[^-\S]" + $NSObjectKey + " " + $uniqueObject + "$"
|
|
|
+ $matchedConfig += $config -match "[^-\S]" + $NSObjectKey + " " + $uniqueObject + "[^\S]"
|
|
|
+ }
|
|
|
+ # if ($uniqueObject -eq "NO_RW_192\.168\.192\.242") {write-host $uniqueObject $matchedConfig}
|
|
|
+
|
|
|
+ $matchedConfig += "`n"
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ if ($explainText) {
|
|
|
+ $explainText = @($explainText -split "`n")
|
|
|
+ $explainText | ForEach-Object {
|
|
|
+ $matchedConfig += "# *** " + $_
|
|
|
+ }
|
|
|
+ $matchedConfig += "`n"
|
|
|
+ }
|
|
|
+
|
|
|
+ # nFactor Visualizer
|
|
|
+ if ($NSObjectKey -eq "authentication vserver") {
|
|
|
+ $linePrefix = "# ** "
|
|
|
+ $spacing = " "
|
|
|
+ foreach ($aaavServer in $uniqueObjects) {
|
|
|
+ $indent = 0
|
|
|
+ $matchedConfig += $linePrefix + "nFactor Visualizer "
|
|
|
+ $matchedConfig += $linePrefix + "------------------ "
|
|
|
+ $matchedConfig += $linePrefix + ($spacing * $indent) + "AAA vserver: " + $aaavServer
|
|
|
+ $matchedConfig += outputnFactorPolicies ("authentication vserver " + $aaavServer) 1
|
|
|
+ $matchedConfig += "`n"
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ # Add line endings to output
|
|
|
+ $SSLVServerName = ""
|
|
|
+ foreach ($line in $matchedConfig) {
|
|
|
+
|
|
|
+ # if binding new cipher group, remove old ciphers first
|
|
|
+ # only add unbind line once per SSL object
|
|
|
+ $SSLvserverNameMatch = $line | select-string -Pattern ('^bind ssl (vserver|service|serviceGroup|monitor) (.*) -cipherName') | ForEach-Object {$_.Matches.Groups[2].value}
|
|
|
+ if ($SSLvserverNameMatch -and ($SSLVServerName -ne $SSLvserverNameMatch)) {
|
|
|
+ $SSLVServerName = $SSLvserverNameMatch
|
|
|
+ $output += ($line -replace "bind (.*) -cipherName .*", "unbind `$1 -cipherName DEFAULT`n")
|
|
|
+ }
|
|
|
+
|
|
|
+ # handle one blank line between mutliple objects of same type
|
|
|
+ if ($line -ne "`n") {
|
|
|
+ $output += $line + "`n"
|
|
|
+ } else {
|
|
|
+ $output += "`n"
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ # Output to file or screen
|
|
|
+ if ($outputFile -and ($outputFile -ne "screen")) {
|
|
|
+ $output | out-file $outputFile -Append
|
|
|
+ } else {
|
|
|
+ $output
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+## Start main script
|
|
|
+
|
|
|
+# Clear configuration from last run
|
|
|
+$nsObjects = @{}
|
|
|
+$nsObjectsCache = @{}
|
|
|
+
|
|
|
+$selectionDone =$false
|
|
|
+$firstLoop = $true
|
|
|
+
|
|
|
+
|
|
|
+do {
|
|
|
+ # Get matching vServer Names. If more than one, prompt for selection.
|
|
|
+ # This loop allows users to change the vServer filter text
|
|
|
+
|
|
|
+ if ($vserver -match " ") {
|
|
|
+ $vserver = [char]34 + $vserver + [char]34
|
|
|
+ }
|
|
|
+ $vservers = $config -match "$vserver" | select-string -Pattern ('^add \w+ vserver (".*?"|[^-"]\S+)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ if (!$vservers) {
|
|
|
+ # Try substring matches without quotes
|
|
|
+ if ($vserver -match " ") { $vserver = $vserver -replace [char]34 }
|
|
|
+ $vservers = $config -match "$vserver" | select-string -Pattern ('^add \w+ vserver (".*?"|[^-"]\S+)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ }
|
|
|
+
|
|
|
+ # Make sure it's an array, even if only one match
|
|
|
+ $vservers = @($vservers)
|
|
|
+
|
|
|
+ # FirstLoop flag enables running script without prompting.
|
|
|
+ # If second loop, then user must have changed the filter and wants to see results even if only one (or none).
|
|
|
+ if (($vservers.length -eq 1 -and $firstLoop) -or $vservers -contains $vserver) {
|
|
|
+ # Get vServer Type
|
|
|
+ $vserverType = $config -match " $vservers " | select-string -Pattern ('^add (\w+) vserver') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ addNSObject ($vserverType + " vserver") $vservers
|
|
|
+ $selectionDone = $true
|
|
|
+ } else {
|
|
|
+ # Prompt for vServer selection
|
|
|
+
|
|
|
+ # Prepend System option
|
|
|
+ $vservers = @("System Settings") + $vservers
|
|
|
+
|
|
|
+ # Get vServer Type for each vServer name - later display to user
|
|
|
+ $vserverTypes = @("") * ($vservers.length)
|
|
|
+ $vserverTypes[0] = "sys"
|
|
|
+
|
|
|
+ if ($vserver) {
|
|
|
+ $vserverConfig = $config -match "$vserver"
|
|
|
+ } else {
|
|
|
+ $vserverConfig = $config -match "add (\w+) vserver"
|
|
|
+ }
|
|
|
+
|
|
|
+ for ($x = 1; $x -lt $vservers.length; $x++) {
|
|
|
+ $vserverTypes[$x] = $vserverConfig | select-string -Pattern ('^add (\w+) vserver ' + $vservers[$x] + " ") | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ }
|
|
|
+
|
|
|
+ # Change "authentication" to "aaa" so it fits within 4 char column
|
|
|
+ $vserverTypes = $vserverTypes -replace "authentication", "aaa"
|
|
|
+
|
|
|
+ # Get VIPs for each vServer so they can be displayed to the user
|
|
|
+ $VIPs = @("") * ($vservers.length)
|
|
|
+ for ($x = 1; $x -lt $vservers.length; $x++) {
|
|
|
+ $VIPs[$x] = $vserverConfig | select-string -Pattern ('^add \w+ vserver ' + $vservers[$x] + ' \w+ (\d+\.\d+\.\d+\.\d+)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ }
|
|
|
+
|
|
|
+ # Get Ports for each vServer so they can be displayed to the user
|
|
|
+ $Ports = @("") * ($vservers.length)
|
|
|
+ for ($x = 1; $x -lt $vservers.length; $x++) {
|
|
|
+ $Ports[$x] = $vserverConfig | select-string -Pattern ('^add \w+ vserver ' + $vservers[$x] + ' \w+ \d+\.\d+\.\d+\.\d+ (\d+)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ }
|
|
|
+
|
|
|
+ # Get Enabled/Disabled State for each vServer so they can be displayed to the user
|
|
|
+ $States = @("") * ($vservers.length)
|
|
|
+ for ($x = 1; $x -lt $vservers.length; $x++) {
|
|
|
+ $States[$x] = $vserverConfig | select-string -Pattern ('^add \w+ vserver ' + $vservers[$x] + ' .*? -state (\w+)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ }
|
|
|
+
|
|
|
+ $selected = @("") * ($vservers.length)
|
|
|
+
|
|
|
+ # Grid View
|
|
|
+ $vserverObjects = @()
|
|
|
+ $vserverObjects = for ($x = 0; $x -lt $vservers.length; $x++) {
|
|
|
+ [PSCustomObject] @{
|
|
|
+ Type = $vserverTypes[$x]
|
|
|
+ Name = $vservers[$x]
|
|
|
+ VIP = $VIPs[$x]
|
|
|
+ Port = $Ports[$x]
|
|
|
+ State = $States[$x]
|
|
|
+ }
|
|
|
+ }
|
|
|
+ if ($IsMacOS){
|
|
|
+ "Use Listbox window to select Virtual Servers`n"
|
|
|
+ $vserverlist = $vservers | Foreach-object{,($_.trim('"') )}
|
|
|
+ $vserverlist = (('tell application "SystemUIServer"'+"`n"+'activate'+"`n"+'set vserver to (choose from list {"'+($vserverlist -join '","')+'"} with prompt "Command+Select Multiple Virtual Servers to extract" with multiple selections allowed)'+"`n"+'end tell' | osascript -s s) -replace ', ',',')
|
|
|
+ $vserverObjects = @()
|
|
|
+ [regex]::Matches($vserverlist, '(?:([\w\s]+))') | ForEach-Object {
|
|
|
+ if ($_.value -match ' '){$vservername = '"'+$_.value+'"'}
|
|
|
+ else {$vservername = $_.value}
|
|
|
+ $x = $vservers.IndexOf($vservername)
|
|
|
+ $vserverObjects += [PSCustomObject] @{
|
|
|
+ Type = $vserverTypes[$x]
|
|
|
+ Name = $vservers[$x]
|
|
|
+ }
|
|
|
+ }
|
|
|
+ } else {
|
|
|
+ "Use Grid View window to select Virtual Servers`n"
|
|
|
+ $vserverObjects = $vserverObjects | Out-GridView -Title "Ctrl+Select Multiple Virtual Servers to extract" -PassThru
|
|
|
+ }
|
|
|
+ if (!$vserverObjects) { exit }
|
|
|
+ $vservers = @()
|
|
|
+ foreach ($vserverObject in $vserverObjects) {
|
|
|
+ if ($vserverObject.Type -eq "aaa") {
|
|
|
+ $vserverObject.Type = "authentication"
|
|
|
+ }
|
|
|
+ if ($vserverObject.Type -eq "sys") {
|
|
|
+ addNSObject ("sys") $vserverObject.Name
|
|
|
+ $vservers += "System Settings"
|
|
|
+ } else {
|
|
|
+ addNSObject ($vserverObject.Type + " vserver") $vserverObject.Name
|
|
|
+ $vservers += $vserverObject.Name
|
|
|
+ }
|
|
|
+ }
|
|
|
+ $selectionDone = $true
|
|
|
+
|
|
|
+ # CLI Menu Selection
|
|
|
+ <# do {
|
|
|
+ $count = 1
|
|
|
+ cls
|
|
|
+ $promptString = "Select one or more of the following Virtual Servers for configuration extraction:`n`n"
|
|
|
+ $promptString += "Virtual Server Filter = $vserver`n`n"
|
|
|
+ $promptString += " Num Type VIP Name`n"
|
|
|
+ $maxLength = ($vservers | sort-object length -desc | select -first 1).length
|
|
|
+ $promptString += " ----- ---- " + ("-" * 15) + " " + ("-" * $maxLength) + "`n"
|
|
|
+ write-host $promptString
|
|
|
+ foreach ($vserverOption in $vservers) {
|
|
|
+ $promptString = "{0,1} {1,4}: {2,4} {3,15} $vserverOption" -f $selected[$count-1], $count, $vserverTypes[$count-1], $VIPs[$count-1]
|
|
|
+ if ($selected[$count-1] -eq "*") {
|
|
|
+ write-host -foregroundcolor yellow $promptString
|
|
|
+ } else {
|
|
|
+ write-host $promptString
|
|
|
+ }
|
|
|
+ $count++
|
|
|
+ }
|
|
|
+ write-host ""
|
|
|
+ $entry = read-host "Enter Number to select/deselect, * for all, 0 for new filter string, or <Enter> to begin extraction"
|
|
|
+ if (!$entry -or $entry -eq "") { $selectionDone = $true; break }
|
|
|
+ if ($entry -eq "*")
|
|
|
+ {
|
|
|
+ for ($x = 0; $x -lt $selected.length; $x++) {
|
|
|
+ if ($selected[$x] -eq "*") {
|
|
|
+ $selected[$x] = ""
|
|
|
+ } else
|
|
|
+ {
|
|
|
+ $selected[$x] = "*"
|
|
|
+ }
|
|
|
+ }
|
|
|
+ } else
|
|
|
+ {
|
|
|
+ try
|
|
|
+ {
|
|
|
+ $entry = [int]$entry
|
|
|
+ if ($entry -lt 0 -or $entry -gt $count)
|
|
|
+ {
|
|
|
+ write-host "`nInvalid entry. Press Enter to try again. ";read-host
|
|
|
+ $entry = "retry"
|
|
|
+ } elseif ($entry -ge 1 -and $entry -le $count)
|
|
|
+ {
|
|
|
+ # Swap select status
|
|
|
+ if ($selected[$entry -1] -eq "*")
|
|
|
+ {
|
|
|
+ $selected[$entry-1] = ""
|
|
|
+ } else
|
|
|
+ {
|
|
|
+ $selected[$entry-1] = "*"
|
|
|
+ }
|
|
|
+ } elseif ($entry -eq 0)
|
|
|
+ {
|
|
|
+ $newFilter = read-host "Enter new filter string"
|
|
|
+ $vserver = $newFilter
|
|
|
+ $entry = ""
|
|
|
+ $selected = ""
|
|
|
+ }
|
|
|
+ } catch
|
|
|
+ {
|
|
|
+ write-host "`nInvalid entry. Press Enter to try again. ";read-host
|
|
|
+ $entry = "retry"
|
|
|
+ }
|
|
|
+ }
|
|
|
+ } while ($entry -and $entry -ne "")
|
|
|
+
|
|
|
+ $vserversSelected = @()
|
|
|
+ for ($x = 0; $x -lt ($selected.length); $x++) {
|
|
|
+ $vserverTypes = $vserverTypes -replace "aaa", "authentication"
|
|
|
+ if ($selected[$x] -eq "*") {
|
|
|
+ addNSObject ($vserverTypes[$x] + " vserver") $vservers[$x]
|
|
|
+ $vserversSelected += $vservers[$x]
|
|
|
+ $selectionDone = $true
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ $vservers = $vserversSelected #>
|
|
|
+ }
|
|
|
+ $firstLoop = $false
|
|
|
+} while (!$selectionDone)
|
|
|
+
|
|
|
+if (!$vservers) { exit }
|
|
|
+
|
|
|
+
|
|
|
+# Run the Get-Output function to ask the user where to save the NetScaler documentation file
|
|
|
+if (!$outputFile) { $outputFile = Get-OutputFile $outputfile }
|
|
|
+
|
|
|
+
|
|
|
+"`nLooking for objects associated with selected vServers: `n" + ($vservers -join "`n") + "`n"
|
|
|
+
|
|
|
+$Timer = [system.diagnostics.stopwatch]::StartNew()
|
|
|
+
|
|
|
+# Get System Objects
|
|
|
+if ($nsObjects."sys") {
|
|
|
+ addNSObject "ns partition" (getNSObjects ($config -match "add ns partition") "ns partition")
|
|
|
+ addNSObject "dns nameServer" (getNSObjects ($config -match "add dns nameServer") "dns nameServer")
|
|
|
+ if ($nsObjects."dns nameServer")
|
|
|
+ {
|
|
|
+ foreach ($nameserver in $nsObjects."dns nameServer") {
|
|
|
+ $nameServerConfig = $config -match "lb vserver $nameserver "
|
|
|
+ addNSObject "lb vserver" (getNSObjects $nameServerConfig "lb vserver")
|
|
|
+ }
|
|
|
+ }
|
|
|
+ addNSObject "ns feature" ($config -match "ns feature")
|
|
|
+ addNSObject "ns mode" ($config -match "ns mode")
|
|
|
+ addNSObject "system parameter" ($config -match "system parameter")
|
|
|
+ addNSObject "ns encryptionParams" ($config -match "set ns encryptionParams")
|
|
|
+ addNSObject "ssl cipher" (getNSObjects $config "ssl cipher" "-cipherName")
|
|
|
+
|
|
|
+ # Get Networking Settings
|
|
|
+ addNSObject "ns config" ($config -match "ns config")
|
|
|
+ addNSObject "ns hostName" ($config -match "ns hostName")
|
|
|
+ addNSObject "interface" ($config -match " interface ")
|
|
|
+ addNSObject "channel" ($config -match " channel ")
|
|
|
+ addNSObject "vlan" (getNSObjects ($config -match " vlan ") "vlan")
|
|
|
+ addNSObject "vrid" (getNSObjects ($config -match "vrid") "vrid")
|
|
|
+ addNSObject "ns ip" (getNSObjects ($config -match "ns ip") "ns ip")
|
|
|
+ addNSObject "route" ($config -match " route ")
|
|
|
+ addNSObject "ns pbr" ($config -match " ns pbr")
|
|
|
+ addNSObject "mgmt ssl service" (getNSObjects ($config -match " ssl service ns(krpcs|https|rpcs|rnatsip)-") "ssl service")
|
|
|
+
|
|
|
+ # Get SNMP
|
|
|
+ addNSObject "snmp community" ($config -match " snmp community")
|
|
|
+ addNSObject "snmp manager" ($config -match " snmp manager")
|
|
|
+ addNSObject "snmp trap" ($config -match " snmp trap")
|
|
|
+ addNSObject "snmp alarm" ($config -match " snmp alarm")
|
|
|
+
|
|
|
+ # Get HA settings
|
|
|
+ addNSObject "ha node" ($config -match "HA node")
|
|
|
+ addNSObject "ha rpcNode" (getNSObjects ($config -match "set ns config") "ns rpcNode")
|
|
|
+ addNSObject "ha rpcNode" (getNSObjects ($config -match "HA node") "ns rpcNode")
|
|
|
+
|
|
|
+ # Get System Global Bindings - authentication, syslog
|
|
|
+ addNSObject "system global" ($config -match "system global")
|
|
|
+ addNSObject "authentication Policy" (getNSObjects ($config -match "system global") "authentication Policy")
|
|
|
+ addNSObject "authentication ldapPolicy" (getNSObjects ($config -match "system global") "authentication ldapPolicy")
|
|
|
+ addNSObject "authentication radiusPolicy" (getNSObjects ($config -match "system global") "authentication radiusPolicy")
|
|
|
+ addNSObject "authentication tacacsPolicy" (getNSObjects ($config -match "system global") "authentication tacacsPolicy")
|
|
|
+ addNSObject "authentication localPolicy" (getNSObjects ($config -match "system global") "authentication localPolicy")
|
|
|
+ addNSObject "audit syslogPolicy" (getNSObjects ($config -match "bind system global") "audit syslogPolicy")
|
|
|
+ addNSObject "audit syslogPolicy" (getNSObjects ($config -match "bind audit syslogGlobal") "audit syslogPolicy")
|
|
|
+ addNSObject "audit nslogPolicy" (getNSObjects ($config -match "bind system global") "audit nslogPolicy")
|
|
|
+ addNSObject "system user" (getNSObjects ($config -match "system user") "system user")
|
|
|
+ addNSObject "system group" (getNSObjects ($config -match "system group") "system group")
|
|
|
+
|
|
|
+}
|
|
|
+
|
|
|
+# If $cswBind switch is true, look for CS vServers that the LB, AAA, and/or VPN vServers are bound to.
|
|
|
+if ($cswBind){
|
|
|
+ $cswBindType = @{lb='lbvserver';vpn='vserver';authentication='vserver'}
|
|
|
+ foreach ($vsrvType in 'lb','vpn','authentication' ) {
|
|
|
+ if ($nsObjects."$vsrvType vserver") {
|
|
|
+ foreach ($vsrv in $nsObjects."$vsrvType vserver")
|
|
|
+ {
|
|
|
+ # CSW Default virtual server
|
|
|
+ if ($config -match "bind cs vserver .* -$($cswBindType.$vsrvType) $vsrv"){
|
|
|
+ addNSObject "cs vserver" ($config -match "bind cs vserver .* -$($cswBindType.$vsrvType) $vsrv" | select-string -Pattern ('^bind cs vserver (".*?"|[^-"]\S+)') | ForEach-Object {$_.Matches.Groups[1].value})
|
|
|
+ }
|
|
|
+ # CSW Policy Bind -targetlbserver
|
|
|
+ if ($config -match "bind cs vserver .* -policyName .* -targetLBVserver $vsrv"){
|
|
|
+ addNSObject "cs vserver" ($config -match "bind cs vserver .* -policyName .* -targetLBVserver $vsrv" | select-string -Pattern ('^bind cs vserver (".*?"|[^-"]\S+)') | ForEach-Object {$_.Matches.Groups[1].value})
|
|
|
+ }
|
|
|
+ # CSW Action -targetlbserver -targetvserver
|
|
|
+ if ($config -match "add cs action .* -target$($cswBindType.$vsrvType) $vsrv"){
|
|
|
+ $csaction = ($config -match "add cs action .* -target$($cswBindType.$vsrvType) $vsrv" | select-string -Pattern ('^add cs action (".*?"|[^-"]\S+)') | ForEach-Object {$_.Matches.Groups[1].value})
|
|
|
+ #CS Policy for CS Action
|
|
|
+ $cspolicy = ($config -match "add cs policy .* -action $csaction" | select-string -Pattern ('^add cs policy (".*?"|[^-"]\S+)') | ForEach-Object {$_.Matches.Groups[1].value})
|
|
|
+ #CS vServer for CS Policy
|
|
|
+ addNSObject "cs vserver" ($config -match "bind cs vserver .* -policyName $cspolicy" | select-string -Pattern ('^bind cs vserver (".*?"|[^-"]\S+)') | ForEach-Object {$_.Matches.Groups[1].value})
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+# Look for Backup CSW vServers and Linked LB vServers
|
|
|
+if ($nsObjects."cs vserver") {
|
|
|
+ if ($config -match "enable ns feature.* CS")
|
|
|
+ {
|
|
|
+ $NSObjects."cs parameter" = @("enable ns feature CS")
|
|
|
+ } else {
|
|
|
+ $NSObjects."cs parameter" = @("# *** CS feature is not enabled")
|
|
|
+ }
|
|
|
+
|
|
|
+ foreach ($csvserver in $nsObjects."cs vserver") {
|
|
|
+ $currentVServers = $nsObjects."cs vserver"
|
|
|
+ $nsObjects."cs vserver" = @()
|
|
|
+ $vserverConfig = $config -match " $csvserver "
|
|
|
+ # Backup VServers should be created before Active VServers
|
|
|
+ $backupVServers = getNSObjects ($vserverConfig) "cs vserver" "-backupVServer"
|
|
|
+ if ($backupVServers) {
|
|
|
+ addNSObject "cs vserver" ($backupVServers)
|
|
|
+ foreach ($vserver in $currentvservers) {
|
|
|
+ if ($backupVServers -notcontains $vserver) {
|
|
|
+ addNSObject "cs vserver" ($vserver)
|
|
|
+ }
|
|
|
+ }
|
|
|
+ } else {
|
|
|
+ $nsObjects."cs vserver" = $currentVServers
|
|
|
+ }
|
|
|
+ addNSObject "lb vserver" (getNSObjects $vserverconfig "lb vserver" "-targetLBVserver")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Enumerate CSW vServer config for additional bound objects
|
|
|
+if ($nsObjects."cs vserver") {
|
|
|
+ foreach ($csvserver in $nsObjects."cs vserver") {
|
|
|
+ $vserverConfig = $config -match "vserver $csvserver "
|
|
|
+ addNSObject "cs policy" (getNSObjects $vserverConfig "cs policy" "-policyName")
|
|
|
+ addNSObject "cs policylabel" (getNSObjects $vserverConfig "cs policylabel" "policylabel")
|
|
|
+ addNSObject "lb vserver" (getNSObjects $vserverConfig "lb vserver" "-lbvserver")
|
|
|
+ addNSObject "gslb vserver" (getNSObjects $vserverConfig "gslb vserver" "-vserver")
|
|
|
+ addNSObject "vpn vserver" (getNSObjects $vserverConfig "vpn vserver" "-vserver")
|
|
|
+ addNSObject "netProfile" (getNSObjects $vserverConfig "netProfile" "-netProfile")
|
|
|
+ addNSObject "ns trafficDomain" (getNSObjects $vserverConfig "ns trafficDomain" "-td")
|
|
|
+ addNSObject "ns tcpProfile" (getNSObjects $vserverConfig "ns tcpProfile" "-tcpProfileName")
|
|
|
+ addNSObject "ns httpProfile" (getNSObjects $vserverConfig "ns httpProfile" "-httpProfileName")
|
|
|
+ addNSObject "db dbProfile" (getNSObjects $vserverConfig "db dbProfile" "-dbProfileName")
|
|
|
+ addNSObject "dns profile" (getNSObjects $vserverConfig "dns profile" "-dnsProfileName")
|
|
|
+ addNSObject "authentication vserver" (getNSObjects $vserverConfig "authentication vserver" "-authnVsName")
|
|
|
+ addNSObject "authentication authnProfile" (getNSObjects $vserverConfig "authentication authnProfile" "-authnProfile")
|
|
|
+ addNSObject "authorization policylabel" (getNSObjects $vserverConfig "authorization policylabel")
|
|
|
+ addNSObject "authorization policy" (getNSObjects $vserverConfig "authorization policy" "-policyName")
|
|
|
+ addNSObject "audit syslogPolicy" (getNSObjects $vserverConfig "audit syslogPolicy" "-policyName")
|
|
|
+ addNSObject "audit nslogPolicy" (getNSObjects $vserverConfig "audit nslogPolicy" "-policyName")
|
|
|
+ addNSObject "ssl policy" (getNSObjects $vserverConfig "ssl policy" "-policyName")
|
|
|
+ addNSObject "ssl cipher" (getNSObjects $vserverConfig "ssl cipher" "-cipherName")
|
|
|
+ addNSObject "ssl profile" (getNSObjects $vserverConfig "ssl profile")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects $vserverConfig "ssl certKey" "-certKeyName")
|
|
|
+ addNSObject "ssl vserver" (getNSObjects ($config -match "ssl vserver $csvserver ") "ssl vserver")
|
|
|
+ addNSObject "cmp policy" (getNSObjects $vserverConfig "cmp policy" "-policyName")
|
|
|
+ addNSObject "cmp policylabel" (getNSObjects $vserverConfig "cmp policylabel" "policylabel")
|
|
|
+ addNSObject "responder policy" (getNSObjects $vserverConfig "responder policy" "-policyName")
|
|
|
+ addNSObject "responder policylabel" (getNSObjects $vserverConfig "responder policylabel" "policylabel")
|
|
|
+ addNSObject "rewrite policy" (getNSObjects $vserverConfig "rewrite policy" "-policyName")
|
|
|
+ addNSObject "rewrite policylabel" (getNSObjects $vserverConfig "rewrite policylabel" "policylabel")
|
|
|
+ addNSObject "appflow policy" (getNSObjects $vserverConfig "appflow policy" "-policyName")
|
|
|
+ addNSObject "appflow policylabel" (getNSObjects $vserverConfig "appflow policylabel" "policylabel")
|
|
|
+ addNSObject "appfw policy" (getNSObjects $vserverConfig "appfw policy" "-policyName")
|
|
|
+ addNSObject "appfw policylabel" (getNSObjects $vserverConfig "appfw policylabel" "policylabel")
|
|
|
+ addNSObject "cache policy" (getNSObjects $vserverConfig "cache policy" "-policyName")
|
|
|
+ addNSObject "cache policylabel" (getNSObjects $vserverConfig "cache policylabel" "policylabel")
|
|
|
+ addNSObject "transform policy" (getNSObjects $vserverConfig "transform policy" "-policyName")
|
|
|
+ addNSObject "transform policylabel" (getNSObjects $vserverConfig "transform policylabel")
|
|
|
+ addNSObject "tm trafficPolicy" (getNSObjects $vserverConfig "tm trafficPolicy" "-policyName")
|
|
|
+ addNSObject "feo policy" (getNSObjects $vserverConfig "feo policy" "-policyName")
|
|
|
+ addNSObject "spillover policy" (getNSObjects $vserverConfig "spillover policy" "-policyName")
|
|
|
+ addNSObject "appqoe policy" (getNSObjects $vserverConfig "appqoe policy" "-policyName")
|
|
|
+ addNSObject "ipset" (getNSObjects $vserverConfig "ipset" "-ipset")
|
|
|
+ addNSObject "analytics profile" (getNSObjects $vserverConfig "analytics profile" "-analyticsProfile")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+# write-host ("cs objects: " + $timer.elapsed.TotalSeconds)
|
|
|
+
|
|
|
+# Get CSW Policies from CSW Policy Labels
|
|
|
+if ($NSObjects."cs policylabel") {
|
|
|
+ foreach ($policy in $NSObjects."cs policylabel") {
|
|
|
+ addNSObject "cs policy" (getNSObjects ($config -match " $policy ") "cs policy")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get CSW Actions from CSW Policies
|
|
|
+if ($NSObjects."cs policy") {
|
|
|
+ $matchExpression = getMatchExpression $NSObjects."cs policy"
|
|
|
+ addNSObject "cs action" (getNSObjects ($config -match " $matchExpression ") "cs action")
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($config -match "cr policy $matchExpression") "audit messageaction" "-logAction")
|
|
|
+
|
|
|
+ # Get vServers linked to CSW Actions
|
|
|
+ if ($NSObjects."cs action") {
|
|
|
+ $matchExpression = getMatchExpression $NSObjects."cs action"
|
|
|
+ $filteredConfig = $config -match " $matchExpression "
|
|
|
+ addNSObject "lb vserver" (getNSObjects ($filteredConfig) "lb vserver" "-targetLBVserver")
|
|
|
+ addNSObject "vpn vserver" (getNSObjects ($filteredConfig) "vpn vserver" "-targetVserver")
|
|
|
+ addNSObject "authentication vserver" (getNSObjects ($filteredConfig) "authentication vserver" "-targetVserver")
|
|
|
+ addNSObject "gslb vserver" (getNSObjects ($filteredConfig) "gslb vserver" "-targetVserver")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Look for Backup CR vServers
|
|
|
+if ($nsObjects."cr vserver") {
|
|
|
+ foreach ($crvserver in $nsObjects."cr vserver") {
|
|
|
+ $currentVServers = $nsObjects."cr vserver"
|
|
|
+ $nsObjects."cr vserver" = @()
|
|
|
+ $vserverConfig = $config -match " $crvserver "
|
|
|
+ # Backup VServers should be created before Active VServers
|
|
|
+ $backupVServers = getNSObjects ($vserverConfig) "cr vserver" "-backupVServer"
|
|
|
+ if ($backupVServers) {
|
|
|
+ addNSObject "cr vserver" ($backupVServers)
|
|
|
+ foreach ($vserver in $currentvservers) {
|
|
|
+ if ($backupVServers -notcontains $vserver) {
|
|
|
+ addNSObject "cr vserver" ($vserver)
|
|
|
+ }
|
|
|
+ }
|
|
|
+ } else {
|
|
|
+ $nsObjects."cr vserver" = $currentVServers
|
|
|
+ }
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Enumerate CR vServer config for additional bound objects
|
|
|
+if ($nsObjects."cr vserver") {
|
|
|
+ foreach ($crvserver in $nsObjects."cr vserver") {
|
|
|
+ $vserverConfig = $config -match " $crvserver "
|
|
|
+ addNSObject "cs policy" (getNSObjects $vserverConfig "cs policy")
|
|
|
+ addNSObject "cs policylabel" (getNSObjects $vserverConfig "cs policylabel" "policylabel")
|
|
|
+ addNSObject "cr policy" (getNSObjects $vserverConfig "cr policy")
|
|
|
+ addNSObject "lb vserver" (getNSObjects $vserverConfig "lb vserver" "-lbvserver")
|
|
|
+ addNSObject "lb vserver" (getNSObjects $vserverConfig "lb vserver" "-dnsVserverName")
|
|
|
+ addNSObject "netProfile" (getNSObjects $vserverConfig "netProfile" "-netProfile")
|
|
|
+ addNSObject "ns trafficDomain" (getNSObjects $vserverConfig "ns trafficDomain" "-td")
|
|
|
+ addNSObject "ns tcpProfile" (getNSObjects $vserverConfig "ns tcpProfile" "-tcpProfileName")
|
|
|
+ addNSObject "ns httpProfile" (getNSObjects $vserverConfig "ns httpProfile" "-httpProfileName")
|
|
|
+ addNSObject "ssl policy" (getNSObjects $vserverConfig "ssl policy" "-policyName")
|
|
|
+ addNSObject "ssl cipher" (getNSObjects $vserverConfig "ssl cipher")
|
|
|
+ addNSObject "ssl profile" (getNSObjects $vserverConfig "ssl profile")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects $vserverConfig "ssl certKey" "-certKeyName")
|
|
|
+ addNSObject "ssl vserver" (getNSObjects ($config -match "ssl vserver $crvserver ") "ssl vserver")
|
|
|
+ addNSObject "cmp policy" (getNSObjects $vserverConfig "cmp policy" "-policyName")
|
|
|
+ addNSObject "cmp policylabel" (getNSObjects $vserverConfig "cmp policylabel" "policylabel")
|
|
|
+ addNSObject "responder policy" (getNSObjects $vserverConfig "responder policy" "-policyName")
|
|
|
+ addNSObject "responder policylabel" (getNSObjects $vserverConfig "responder policylabel" "policylabel")
|
|
|
+ addNSObject "rewrite policy" (getNSObjects $vserverConfig "rewrite policy" "-policyName")
|
|
|
+ addNSObject "rewrite policylabel" (getNSObjects $vserverConfig "rewrite policylabel" "policylabel")
|
|
|
+ addNSObject "appflow policy" (getNSObjects $vserverConfig "appflow policy" "-policyName")
|
|
|
+ addNSObject "appflow policylabel" (getNSObjects $vserverConfig "appflow policylabel" "policylabel")
|
|
|
+ addNSObject "appfw policy" (getNSObjects $vserverConfig "appfw policy" "-policyName")
|
|
|
+ addNSObject "appfw policylabel" (getNSObjects $vserverConfig "appfw policylabel" "policylabel")
|
|
|
+ addNSObject "cache policy" (getNSObjects $vserverConfig "cache policy" "-policyName")
|
|
|
+ addNSObject "cache policylabel" (getNSObjects $vserverConfig "cache policylabel" "policylabel")
|
|
|
+ addNSObject "feo policy" (getNSObjects $vserverConfig "feo policy" "-policyName")
|
|
|
+ addNSObject "spillover policy" (getNSObjects $vserverConfig "spillover policy" "-policyName")
|
|
|
+ addNSObject "appqoe policy" (getNSObjects $vserverConfig "appqoe policy" "-policyName")
|
|
|
+ addNSObject "ica policy" (getNSObjects $vserverConfig "ica policy" "-policyName")
|
|
|
+ addNSObject "ipset" (getNSObjects $vserverConfig "ipset" "-ipset")
|
|
|
+ addNSObject "analytics profile" (getNSObjects $vserverConfig "analytics profile" "-analyticsProfile")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+# Get Message Actions from CR Policies
|
|
|
+if ($NSObjects."cr policy") {
|
|
|
+ foreach ($policy in $NSObjects."cr policy") {
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($config -match "cr policy $policy") "audit messageaction" "-logAction")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get CSW Policies from CSW Policy Labels
|
|
|
+if ($NSObjects."cs policylabel") {
|
|
|
+ foreach ($policy in $NSObjects."cs policylabel") {
|
|
|
+ addNSObject "cs policy" (getNSObjects ($config -match " $policy ") "cs policy")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get CSW Actions from CSW Policies
|
|
|
+if ($NSObjects."cs policy") {
|
|
|
+ $matchExpression = getMatchExpression $NSObjects."cs policy"
|
|
|
+ addNSObject "cs action" (getNSObjects ($config -match " $matchExpression ") "cs action")
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($config -match "cs policy $matchExpression") "audit messageaction" "-logAction")
|
|
|
+
|
|
|
+ # Get vServers linked to CSW Actions
|
|
|
+ if ($NSObjects."cs action") {
|
|
|
+ $matchExpression = getMatchExpression $NSObjects."cs action"
|
|
|
+ $filteredConfig = $config -match " $matchExpression "
|
|
|
+ foreach ($action in $NSObjects."cs action") {
|
|
|
+ addNSObject "lb vserver" (getNSObjects ( $filteredConfig) "lb vserver" "-targetLBVserver")
|
|
|
+ addNSObject "vpn vserver" (getNSObjects ( $filteredConfig) "vpn vserver" "-targetVserver")
|
|
|
+ addNSObject "gslb vserver" (getNSObjects ( $filteredConfig) "gslb vserver" "-targetVserver")
|
|
|
+ }
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+# Look for Backup GSLB vServers
|
|
|
+if ($nsObjects."gslb vserver") {
|
|
|
+ foreach ($gslbvserver in $nsObjects."gslb vserver") {
|
|
|
+# $currentVServers = $nsObjects."gslb vserver"
|
|
|
+# $nsObjects."gslb vserver" = @()
|
|
|
+ $vserverConfig = $config -match " $gslbvserver "
|
|
|
+ # Backup VServers should be created before Active VServers
|
|
|
+ $backupVServers = getNSObjects ($vserverConfig) "gslb vserver" "-backupVServer"
|
|
|
+ if ($backupVServers) {
|
|
|
+ addNSObject "gslb vserver" ($backupVServers)
|
|
|
+# foreach ($vserver in $currentvservers) {
|
|
|
+# if ($backupVServers -notcontains $vserver) {
|
|
|
+# addNSObject "gslb vserver" ($vserver)
|
|
|
+# }
|
|
|
+# }
|
|
|
+# } else {
|
|
|
+# $nsObjects."gslb vserver" = $currentVServers
|
|
|
+ }
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Enumerate GSLB vServer config for additional bound objects
|
|
|
+if ($nsObjects."gslb vserver") {
|
|
|
+ if ($config -match "enable ns feature.* GSLB") {
|
|
|
+ $NSObjects."gslb parameter" = @("enable ns feature gslb")
|
|
|
+ } else {
|
|
|
+ $NSObjects."gslb parameter" = @("# *** GSLB feature is not enabled")
|
|
|
+ }
|
|
|
+ foreach ($gslbvserver in $nsObjects."gslb vserver") {
|
|
|
+ $vserverConfig = $config -match " $gslbvserver "
|
|
|
+ addNSObject "gslb service" (getNSObjects $vserverConfig "gslb service" "-serviceName")
|
|
|
+ addNSObject "ssl vserver" (getNSObjects ($config -match "ssl vserver $gslbvserver ") "ssl vserver")
|
|
|
+ addNSObject "dns soaRec" (getNSObjects $vserverConfig "dns soaRec")
|
|
|
+ addNSObject "dns nsRec" (getNSObjects $vserverConfig "dns nsRec")
|
|
|
+ }
|
|
|
+
|
|
|
+ if ($NSObjects."gslb service")
|
|
|
+ {
|
|
|
+ foreach ($service in $NSObjects."gslb service")
|
|
|
+ {
|
|
|
+ # wrap config matches in spaces to avoid substring matches
|
|
|
+ $serviceConfig = $config -match " gslb service $service "
|
|
|
+ addNSObject "monitor" (getNSObjects $serviceConfig "lb monitor" "-monitorName")
|
|
|
+ addNSObject "monitor" (getNSObjects $serviceConfig "monitor" "-monitorName")
|
|
|
+ addNSObject "server" (getNSObjects $serviceConfig "server")
|
|
|
+ addNSObject "ssl profile" (getNSObjects $serviceConfig "ssl profile")
|
|
|
+ addNSObject "netProfile" (getNSObjects $serviceConfig "netProfile" "-netProfile")
|
|
|
+ addNSObject "ns trafficDomain" (getNSObjects $serviceConfig "ns trafficDomain" "-td")
|
|
|
+ addNSObject "dns view" (getNSObjects $serviceConfig "dns view" "-viewName")
|
|
|
+ addNSObject "gslb site" (getNSObjects $serviceConfig "gslb site" "-siteName")
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ if ($NSObjects."gslb site")
|
|
|
+ {
|
|
|
+ foreach ($site in $NSObjects."gslb site")
|
|
|
+ {
|
|
|
+ $siteConfig = $config -match "add gslb site $site "
|
|
|
+ addNSObject "ns rpcNode" (getNSObjects $siteConfig "ns rpcNode")
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ addNSObject "dns cnameRec" (getNSObjects ($config -match "^add dns cnameRec ") "dns cnameRec")
|
|
|
+ addNSObject "dns addRec" (getNSObjects ($config | select-string -Pattern "^add dns addRec" | select-string -NotMatch -Pattern ".root-servers.net") "dns addRec")
|
|
|
+ addNSObject "gslb location" ($config -match "^set locationParameter") "gslb location"
|
|
|
+ addNSObject "gslb location" ($config -match " locationFile ") "gslb location"
|
|
|
+ addNSObject "gslb location" ($config -match "^add location ") "gslb location"
|
|
|
+ addNSObject "gslb parameter" ($config -match "^set gslb parameter ") "gslb parameter"
|
|
|
+ addNSObject "gslb parameter" ($config -match "^set dns parameter") "gslb parameter"
|
|
|
+ # Get all global DNS Responder policies in case they affect GSLB DNS traffic
|
|
|
+ addNSObject "responder policy" (getNSObjects ($config -match "^bind responder global .*? -type DNS_REQ_") "responder policy")
|
|
|
+ # Get all global DNS Policy bindings in case they affect ADNS traffic?
|
|
|
+ addNSObject "dns policy" (getNSObjects ($config -match "^bind dns global") "dns policy")
|
|
|
+ addNSObject "adns service" ($config -match '^add service (".*?"|[^-"]\S+) \d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3} ADNS') "adns service"
|
|
|
+ # Get all DNS LB vServers in case they are used for DNS Queries?
|
|
|
+ addNSObject "lb vserver" (getNSObjects ($config -match '^add lb vserver (".*?"|[^-"]\S+) DNS') "lb vserver")
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get DNS Actions and DNS Polices from DNS Views
|
|
|
+if ($nsObjects."dns view") {
|
|
|
+ foreach ($view in $nsObjects."dns view") {
|
|
|
+ addNSObject "dns action" (getNSObjects ($config -match "dns action .*? -viewName $view") "dns action")
|
|
|
+ }
|
|
|
+ foreach ($action in $nsObjects."dns action") {
|
|
|
+ addNSObject "dns policy" (getNSObjects ($config -match "dns policy .*? $action") "dns policy" )
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+if ($nsObjects."dns policy") {
|
|
|
+ # Get DNS Actions for global DNS policies discovered earlier
|
|
|
+ foreach ($policy in $nsObjects."dns policy") {
|
|
|
+ addNSObject "dns action" (getNSObjects ($config -match "dns policy $policy") "dns action")
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($config -match "dns policy $policy") "audit messageaction" "-logAction")
|
|
|
+ }
|
|
|
+ # Get DNS Profiles linked to DNS Actions
|
|
|
+ foreach ($action in $nsObjects."dns action") {
|
|
|
+ addNSObject "dns profile" (getNSObjects ($config -match "dns action $action") "dns profile" "-dnsProfileName" )
|
|
|
+ }
|
|
|
+ # Get DNS Views linked to DNS Actions
|
|
|
+ foreach ($action in $nsObjects."dns action") {
|
|
|
+ addNSObject "dns view" (getNSObjects ($config -match "dns action $action") "dns view" "-viewName" )
|
|
|
+ }
|
|
|
+ addNSObject "dns global" ($config -match "bind dns global ") "dns global"
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+# Enumerate VPN vServer config for additional bound objects
|
|
|
+if ($nsObjects."vpn vserver") {
|
|
|
+ if ($config -match "enable ns feature.* SSLVPN") {
|
|
|
+ $NSObjects."vpn parameter" = @("enable ns feature SSLVPN")
|
|
|
+ } else {
|
|
|
+ $NSObjects."vpn parameter" = @("# *** Citrix Gateway feature is not enabled")
|
|
|
+ }
|
|
|
+ addNSObject "vpn parameter" ($config -match "vpn parameter") "vpn parameter"
|
|
|
+ addNSObject "vpn parameter" ($config -match "ica parameter") "vpn parameter"
|
|
|
+ addNSObject "vpn parameter" ($config -match "aaa parameter") "vpn parameter"
|
|
|
+ addNSObject "vpn parameter" ($config -match "dns suffix") "vpn parameter"
|
|
|
+ addNSObject "clientless domains" ($config -match "ns_cvpn_default_inet_domains") "clientless domains"
|
|
|
+ foreach ($vpnvserver in $nsObjects."vpn vserver") {
|
|
|
+ $vserverConfig = $config -match " $vpnvserver "
|
|
|
+ addNSObject "cs policylabel" (getNSObjects $vserverConfig "cs policylabel")
|
|
|
+ addNSObject "cs policy" (getNSObjects $vserverConfig "cs policy")
|
|
|
+ addNSObject "ns tcpProfile" (getNSObjects $vserverConfig "ns tcpProfile")
|
|
|
+ addNSObject "netProfile" (getNSObjects $vserverConfig "netProfile" "-netProfile")
|
|
|
+ addNSObject "ns httpProfile" (getNSObjects $vserverConfig "ns httpProfile" "-httpProfileName")
|
|
|
+ addNSObject "ns trafficDomain" (getNSObjects $vserverConfig "ns trafficDomain" "-td")
|
|
|
+ addNSObject "authentication authnProfile" (getNSObjects $vserverConfig "authentication authnProfile" "-authnProfile")
|
|
|
+ addNSObject "vpn pcoipVserverProfile" (getNSObjects $vserverConfig "vpn pcoipVserverProfile" "-pcoipVserverProfileName")
|
|
|
+ addNSObject "vpn intranetApplication" (getNSObjects $vserverConfig "vpn intranetApplication" "-intranetApplication")
|
|
|
+ addNSObject "vpn portaltheme" (getNSObjects $vserverConfig "vpn portaltheme" "-portaltheme")
|
|
|
+ addNSObject "vpn eula" (getNSObjects $vserverConfig "vpn eula" "-eula")
|
|
|
+ addNSObject "vpn nextHopServer" (getNSObjects $vserverConfig "vpn nextHopServer" "-nextHopServer")
|
|
|
+ addNSObject "authentication ldapPolicy" (getNSObjects $vserverConfig "authentication ldapPolicy" "-policy")
|
|
|
+ addNSObject "authentication radiusPolicy" (getNSObjects $vserverConfig "authentication radiusPolicy" "-policy")
|
|
|
+ addNSObject "authentication samlIdPPolicy" (getNSObjects $vserverConfig "authentication samlIdPPolicy")
|
|
|
+ addNSObject "authentication samlPolicy" (getNSObjects $vserverConfig "authentication samlPolicy")
|
|
|
+ addNSObject "authentication certPolicy" (getNSObjects $vserverConfig "authentication certPolicy")
|
|
|
+ addNSObject "authentication dfaPolicy" (getNSObjects $vserverConfig "authentication dfaPolicy")
|
|
|
+ addNSObject "authentication localPolicy" (getNSObjects $vserverConfig "authentication localPolicy")
|
|
|
+ addNSObject "authentication negotiatePolicy" (getNSObjects $vserverConfig "authentication negotiatePolicy")
|
|
|
+ addNSObject "authentication tacacsPolicy" (getNSObjects $vserverConfig "authentication tacacsPolicy")
|
|
|
+ addNSObject "authentication webAuthPolicy" (getNSObjects $vserverConfig "authentication webAuthPolicy")
|
|
|
+ addNSObject "aaa preauthenticationpolicy" (getNSObjects $vserverConfig "aaa preauthenticationpolicy" "-policy")
|
|
|
+ addNSObject "vpn sessionPolicy" (getNSObjects $vserverConfig "vpn sessionPolicy" "-policy")
|
|
|
+ addNSObject "vpn trafficPolicy" (getNSObjects $vserverConfig "vpn trafficPolicy" "-policy")
|
|
|
+ addNSObject "vpn clientlessAccessPolicy" (getNSObjects $vserverConfig "vpn clientlessAccessPolicy" "-policy")
|
|
|
+ addNSObject "authorization policylabel" (getNSObjects $vserverConfig "authorization policylabel")
|
|
|
+ addNSObject "authorization policy" (getNSObjects $vserverConfig "authorization policy" "-policy")
|
|
|
+ addNSObject "responder policy" (getNSObjects $vserverConfig "responder policy" "-policy")
|
|
|
+ addNSObject "responder policylabel" (getNSObjects $vserverConfig "responder policylabel" "policylabel")
|
|
|
+ addNSObject "rewrite policy" (getNSObjects $vserverConfig "rewrite policy" "-policy")
|
|
|
+ addNSObject "rewrite policylabel" (getNSObjects $vserverConfig "rewrite policylabel" "policylabel")
|
|
|
+ addNSObject "appflow policy" (getNSObjects $vserverConfig "appflow policy" "-policy")
|
|
|
+ addNSObject "appflow policylabel" (getNSObjects $vserverConfig "appflow policylabel" "policylabel")
|
|
|
+ addNSObject "cache policy" (getNSObjects $vserverConfig "cache policy" "-policy")
|
|
|
+ addNSObject "cache policylabel" (getNSObjects $vserverConfig "cache policylabel" "policylabel")
|
|
|
+ addNSObject "audit syslogPolicy" (getNSObjects $vserverConfig "audit syslogPolicy" "-policy")
|
|
|
+ addNSObject "audit nslogPolicy" (getNSObjects $vserverConfig "audit nslogPolicy" "-policy")
|
|
|
+ addNSObject "ica policy" (getNSObjects $vserverConfig "ica policy" "-policy")
|
|
|
+ addNSObject "ssl policy" (getNSObjects $vserverConfig "ssl policy" "-policy")
|
|
|
+ addNSObject "ssl cipher" (getNSObjects $vserverConfig "ssl cipher")
|
|
|
+ addNSObject "ssl profile" (getNSObjects $vserverConfig "ssl profile")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects $vserverConfig "ssl certKey" "-certkeyName")
|
|
|
+ addNSObject "ssl vserver" (getNSObjects ($config -match "ssl vserver $vpnvserver ") "ssl vserver")
|
|
|
+ addNSObject "vpn url" (getNSObjects $vserverConfig "vpn url" "-urlName")
|
|
|
+ addNSObject "ipset" (getNSObjects $vserverConfig "ipset" "-ipset")
|
|
|
+ addNSObject "analytics profile" (getNSObjects $vserverConfig "analytics profile" "-analyticsProfile")
|
|
|
+ }
|
|
|
+ addNSObject "aaa group" (getNSObjects ($config -match "add aaa group") "aaa group")
|
|
|
+ addNSObject "vpn global" ($config -match "bind vpn global ") "vpn global"
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get CSW Policies from CSW Policy Labels
|
|
|
+if ($NSObjects."cs policylabel") {
|
|
|
+ foreach ($policy in $NSObjects."cs policylabel") {
|
|
|
+ addNSObject "cs policy" (getNSObjects ($config -match " $policy ") "cs policy")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get CSW Actions from CSW Policies
|
|
|
+if ($NSObjects."cs policy") {
|
|
|
+ $matchExpression = GetMatchExpression $NSObjects."cs policy"
|
|
|
+ addNSObject "cs action" (getNSObjects ($config -match " $matchExpression ") "cs action")
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($config -match "cs policy $matchExpression") "audit messageaction" "-logAction")
|
|
|
+
|
|
|
+ # Get vServers linked to CSW Actions
|
|
|
+ if ($NSObjects."cs action") {
|
|
|
+ $matchExpression = GetMatchExpression $NSObjects."cs action"
|
|
|
+ $filteredConfig = $config -match " $matchExpression "
|
|
|
+ addNSObject "lb vserver" (getNSObjects ($filteredConfig) "lb vserver" "-targetLBVserver")
|
|
|
+ addNSObject "vpn vserver" (getNSObjects ($filteredConfig) "vpn vserver" "-targetVserver")
|
|
|
+ addNSObject "gslb vserver" (getNSObjects ($filteredConfig) "gslb vserver" "-targetVserver")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get objects bound to VPN Global
|
|
|
+if ($nsObjects."vpn global") {
|
|
|
+ $vserverConfig = $config -match "bind vpn global "
|
|
|
+ addNSObject "vpn intranetApplication" (getNSObjects $vserverConfig "vpn intranetApplication" "-intranetApplication")
|
|
|
+ addNSObject "vpn portaltheme" (getNSObjects $vserverConfig "vpn portaltheme" "-portaltheme")
|
|
|
+ addNSObject "vpn eula" (getNSObjects $vserverConfig "vpn eula" "-eula")
|
|
|
+ addNSObject "vpn nextHopServer" (getNSObjects $vserverConfig "vpn nextHopServer" "-nextHopServer")
|
|
|
+ addNSObject "authentication ldapPolicy" (getNSObjects $vserverConfig "authentication ldapPolicy" "-policyName")
|
|
|
+ addNSObject "authentication radiusPolicy" (getNSObjects $vserverConfig "authentication radiusPolicy" "-policyName")
|
|
|
+ addNSObject "authentication samlIdPPolicy" (getNSObjects $vserverConfig "authentication samlIdPPolicy")
|
|
|
+ addNSObject "authentication samlPolicy" (getNSObjects $vserverConfig "authentication samlPolicy")
|
|
|
+ addNSObject "authentication certPolicy" (getNSObjects $vserverConfig "authentication certPolicy")
|
|
|
+ addNSObject "authentication dfaPolicy" (getNSObjects $vserverConfig "authentication dfaPolicy")
|
|
|
+ addNSObject "authentication localPolicy" (getNSObjects $vserverConfig "authentication localPolicy")
|
|
|
+ addNSObject "authentication negotiatePolicy" (getNSObjects $vserverConfig "authentication negotiatePolicy")
|
|
|
+ addNSObject "authentication tacacsPolicy" (getNSObjects $vserverConfig "authentication tacacsPolicy")
|
|
|
+ addNSObject "authentication webAuthPolicy" (getNSObjects $vserverConfig "authentication webAuthPolicy")
|
|
|
+ addNSObject "vpn sessionPolicy" (getNSObjects $vserverConfig "vpn sessionPolicy" "-policyName")
|
|
|
+ addNSObject "vpn trafficPolicy" (getNSObjects $vserverConfig "vpn trafficPolicy" "-policyName")
|
|
|
+ addNSObject "vpn clientlessAccessPolicy" (getNSObjects $vserverConfig "vpn clientlessAccessPolicy" "-policyName")
|
|
|
+ addNSObject "authorization policylabel" (getNSObjects $vserverConfig "authorization policylabel" "policylabel")
|
|
|
+ addNSObject "authorization policy" (getNSObjects $vserverConfig "authorization policy" "-policyName")
|
|
|
+ addNSObject "responder policy" (getNSObjects $vserverConfig "responder policy" "-policyName")
|
|
|
+ addNSObject "responder policylabel" (getNSObjects $vserverConfig "responder policylabel" "policylabel")
|
|
|
+ addNSObject "rewrite policy" (getNSObjects $vserverConfig "rewrite policy" "-policyName")
|
|
|
+ addNSObject "rewrite policylabel" (getNSObjects $vserverConfig "rewrite policylabel" "policylabel")
|
|
|
+ addNSObject "cache policy" (getNSObjects $vserverConfig "cache policy" "-policyName")
|
|
|
+ addNSObject "cache policylabel" (getNSObjects $vserverConfig "cache policylabel" "policylabel")
|
|
|
+ addNSObject "audit syslogPolicy" (getNSObjects $vserverConfig "audit syslogPolicy" "-policyName")
|
|
|
+ addNSObject "audit nslogPolicy" (getNSObjects $vserverConfig "audit nslogPolicy" "-policyName")
|
|
|
+ addNSObject "ica policy" (getNSObjects $vserverConfig "ica policy" "-policyName")
|
|
|
+ addNSObject "ssl policy" (getNSObjects $vserverConfig "ssl policy" "-policyName")
|
|
|
+ addNSObject "vpn url" (getNSObjects $vserverConfig "vpn url" "-urlName")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects $vserverConfig "ssl certKey" "-certkeyName")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects $vserverConfig "ssl certKey" "-cacert")
|
|
|
+
|
|
|
+ $vserverConfig = $config -match "set vpn parameter "
|
|
|
+ addNSObject "lb vserver" (getNSObjects $vserverConfig "lb vserver" "-dnsVserverName")
|
|
|
+ addNSObject "vpn alwaysONProfile" (getNSObjects $vserverConfig "vpn alwaysONProfile" "-alwaysONProfileName")
|
|
|
+ addNSObject "aaa kcdAccount" (getNSObjects $vserverConfig "aaa kcdAccount" "-kcdAccount")
|
|
|
+ addNSObject "vpn pcoipProfile" (getNSObjects $vserverConfig "vpn pcoipProfile" "-pcoipProfileName")
|
|
|
+ addNSObject "rdp clientprofile" (getNSObjects $vserverConfig "rdp clientprofile" "-rdpClientProfileName")
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Look for LB Persistency Groups
|
|
|
+if ($nsObjects."lb vserver") {
|
|
|
+ $matchExpression = getMatchExpression $nsObjects."lb vserver"
|
|
|
+ $vserverConfig = $config -match " $matchExpression$"
|
|
|
+ addNSObject "lb group" (getNSObjects ($vserverConfig) "lb group")
|
|
|
+ if ($nsObjects."lb group") {
|
|
|
+ foreach ($lbgroup in $NSObjects."lb group") {
|
|
|
+ addNSObject "lb vserver" (getNSObjects ($config -match "lb group " + $lbgroup) "lb vserver")
|
|
|
+ }
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Look for Backup LB vServers
|
|
|
+if ($nsObjects."lb vserver") {
|
|
|
+ $matchExpression = getMatchExpression $nsObjects."lb vserver"
|
|
|
+ $currentVServers = $nsObjects."lb vserver"
|
|
|
+ $nsObjects."lb vserver" = @()
|
|
|
+ $vserverConfig = $config -match " $matchExpression "
|
|
|
+ # Backup VServers should be created before Active VServers
|
|
|
+ $backupVServers = getNSObjects ($vserverConfig) "lb vserver" "-backupVServer"
|
|
|
+ if ($backupVServers) {
|
|
|
+ addNSObject "lb vserver" ($backupVServers)
|
|
|
+ foreach ($vserver in $currentvservers) {
|
|
|
+ if ($backupVServers -notcontains $vserver) {
|
|
|
+ addNSObject "lb vserver" ($vserver)
|
|
|
+ }
|
|
|
+ }
|
|
|
+ } else {
|
|
|
+ $nsObjects."lb vserver" = $currentVServers
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get objects linked to AAA Groups
|
|
|
+if ($nsObjects."aaa group") {
|
|
|
+ foreach ($group in $nsObjects."aaa group") {
|
|
|
+ $groupConfig = $config -match " aaa group $group "
|
|
|
+ addNSObject "vpn intranetApplication" (getNSObjects $groupConfig "vpn intranetApplication" "-intranetApplication")
|
|
|
+ addNSObject "vpn sessionPolicy" (getNSObjects $groupConfig "vpn sessionPolicy" "-policy")
|
|
|
+ addNSObject "vpn trafficPolicy" (getNSObjects $groupConfig "vpn trafficPolicy" "-policy")
|
|
|
+ addNSObject "authorization policylabel" (getNSObjects $vserverConfig "authorization policylabel")
|
|
|
+ addNSObject "authorization policy" (getNSObjects $groupConfig "authorization policy" "-policy")
|
|
|
+ addNSObject "vpn url" (getNSObjects $groupConfig "vpn url" "-urlName")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Preauthentication Actions from Preauthentication Policies
|
|
|
+if ($NSObjects."aaa preauthenticationpolicy") {
|
|
|
+ foreach ($policy in $NSObjects."aaa preauthenticationpolicy") {
|
|
|
+ addNSObject "aaa preauthenticationaction" (getNSObjects ($config -match "aaa preauthenticationpolicy $policy ") "aaa preauthenticationaction" -position 4)
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get VPN Session Actions from VPN Session Policies
|
|
|
+if ($NSObjects."vpn sessionPolicy") {
|
|
|
+ foreach ($policy in $NSObjects."vpn sessionPolicy") {
|
|
|
+ addNSObject "vpn sessionAction" (getNSObjects ($config -match "vpn sessionPolicy $policy ") "vpn sessionAction" -position 4)
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get KCD Accounts and DNS LB vServers from VPN Session Actions
|
|
|
+if ($NSObjects."vpn sessionAction") {
|
|
|
+ foreach ($profile in $NSObjects."vpn sessionAction")
|
|
|
+ {
|
|
|
+ $profileConfig = $config -match "vpn sessionAction $profile "
|
|
|
+ addNSObject "aaa kcdAccount" (getNSObjects $profileConfig "aaa kcdAccount" "-kcdAccount")
|
|
|
+ addNSObject "lb vserver" (getNSObjects $profileConfig "lb vserver" "-dnsVserverName")
|
|
|
+ if ($profileConfig -match "http://" -or $profileConfig -match "https://")
|
|
|
+ {
|
|
|
+ addNSObject "lb vserver" (getHttpVServer $profileConfig)
|
|
|
+ }
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Enumerate LB vServer config for additional bound objects
|
|
|
+if ($nsObjects."lb vserver" -or $nsObjects."sys") {
|
|
|
+ if ($config -match "enable ns feature.* lb") {
|
|
|
+ $NSObjects."lb parameter" = @("enable ns feature lb")
|
|
|
+ } else {
|
|
|
+ $NSObjects."lb parameter" = @("# *** Load Balancing feature is not enabled")
|
|
|
+ }
|
|
|
+ addNSObject "lb parameter" ($config -match "ns mode") "lb parameter"
|
|
|
+ addNSObject "lb parameter" ($config -match "set lb parameter") "lb parameter"
|
|
|
+ addNSObject "lb parameter" ($config -match "set ns param") "lb parameter"
|
|
|
+ addNSObject "lb parameter" ($config -match "set dns parameter") "lb parameter"
|
|
|
+ addNSObject "lb parameter" ($config -match "set dns profile default-dns-profile") "lb parameter"
|
|
|
+ addNSObject "lb parameter" ($config -match "set ns tcpParam") "lb parameter"
|
|
|
+ addNSObject "lb parameter" ($config -match "set ns tcpProfile nstcp_default") "lb parameter"
|
|
|
+ addNSObject "lb parameter" ($config -match "set ns httpParam") "lb parameter"
|
|
|
+ addNSObject "lb parameter" ($config -match "set ns tcpbufParam") "lb parameter"
|
|
|
+ addNSObject "lb parameter" ($config -match "set ns timeout") "lb parameter"
|
|
|
+ GetLBvServerBindings $NSObjects."lb vserver"
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get AAA VServers linked to Authentication Profiles
|
|
|
+if ($NSObjects."authentication authnProfile") {
|
|
|
+ foreach ($profile in $NSObjects."authentication authnProfile") {
|
|
|
+ addNSObject "authentication vserver" (getNSObjects ($config -match "authentication authnProfile $profile ") "authentication vserver" "-authnVsName")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Objects linked to Authentication vServers
|
|
|
+if ($NSObjects."authentication vserver") {
|
|
|
+ if ($config -match "enable ns feature.* rewrite") {
|
|
|
+ $NSObjects."authentication param" = @("enable ns feature AAA")
|
|
|
+ } else {
|
|
|
+ $NSObjects."authentication param" = @("# *** AAA feature is not enabled")
|
|
|
+ }
|
|
|
+ $matchExpression = getMatchExpression $NSObjects."authentication vserver"
|
|
|
+ $vserverConfig = $config -match " $matchExpression "
|
|
|
+ addNSObject "ns trafficDomain" (getNSObjects $vserverConfig "ns trafficDomain" "-td")
|
|
|
+ addNSObject "authentication ldapPolicy" (getNSObjects $vserverConfig "authentication ldapPolicy")
|
|
|
+ addNSObject "authentication radiusPolicy" (getNSObjects $vserverConfig "authentication radiusPolicy")
|
|
|
+ addNSObject "authentication policy" (getNSObjects $vserverConfig "authentication policy")
|
|
|
+ addNSObject "authentication samlIdPPolicy" (getNSObjects $vserverConfig "authentication samlIdPPolicy")
|
|
|
+ addNSObject "authentication samlPolicy" (getNSObjects $vserverConfig "authentication samlPolicy")
|
|
|
+ addNSObject "authentication certPolicy" (getNSObjects $vserverConfig "authentication certPolicy")
|
|
|
+ addNSObject "authentication dfaPolicy" (getNSObjects $vserverConfig "authentication dfaPolicy")
|
|
|
+ addNSObject "authentication localPolicy" (getNSObjects $vserverConfig "authentication localPolicy")
|
|
|
+ addNSObject "authentication negotiatePolicy" (getNSObjects $vserverConfig "authentication negotiatePolicy")
|
|
|
+ addNSObject "authentication tacacsPolicy" (getNSObjects $vserverConfig "authentication tacacsPolicy")
|
|
|
+ addNSObject "authentication webAuthPolicy" (getNSObjects $vserverConfig "authentication webAuthPolicy")
|
|
|
+ addNSObject "tm sessionPolicy" (getNSObjects $vserverConfig "tm sessionPolicy")
|
|
|
+ addNSObject "vpn portaltheme" (getNSObjects $vserverConfig "vpn portaltheme" "-portaltheme")
|
|
|
+ addNSObject "authentication loginSchemaPolicy" (getNSObjects $vserverConfig "authentication loginSchemaPolicy")
|
|
|
+ addNSObject "authentication policylabel" (getNSObjects $vserverConfig "authentication policylabel" "-nextFactor")
|
|
|
+ addNSObject "audit syslogPolicy" (getNSObjects $vserverConfig "audit syslogPolicy" "-policy")
|
|
|
+ addNSObject "audit nslogPolicy" (getNSObjects $vserverConfig "audit nslogPolicy" "-policy")
|
|
|
+ addNSObject "cs policy" (getNSObjects $vserverConfig "cs policy" "-policy")
|
|
|
+ addNSObject "ssl policy" (getNSObjects $vserverConfig "ssl policy" "-policy")
|
|
|
+ addNSObject "ssl cipher" (getNSObjects $vserverConfig "ssl cipher" "-cipherName")
|
|
|
+ addNSObject "ssl profile" (getNSObjects $vserverConfig "ssl profile")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects $vserverConfig "ssl certKey" "-certkeyName")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects $vserverConfig "ssl certKey" "-cacert")
|
|
|
+ addNSObject "ssl vserver" (getNSObjects ($config -match "ssl vserver $authVServer ") "ssl vserver")
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get CSW Actions from CSW Policies
|
|
|
+if ($NSObjects."cs policy") {
|
|
|
+ $matchExpression = getMatchExpression $NSObjects."cs policy"
|
|
|
+ addNSObject "cs action" (getNSObjects ($config -match " $matchExpression ") "cs action")
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($config -match "cr policy $policy") "audit messageaction" "-logAction")
|
|
|
+
|
|
|
+ # Get vServers linked to CSW Actions
|
|
|
+ if ($NSObjects."cs action") {
|
|
|
+ $matchExpression = getMatchExpression $NSObjects."cs action"
|
|
|
+ $filteredConfig = $config -match " $matchExpression "
|
|
|
+ addNSObject "lb vserver" (getNSObjects ($filteredConfig) "lb vserver" "-targetLBVserver")
|
|
|
+ addNSObject "vpn vserver" (getNSObjects ($filteredConfig) "vpn vserver" "-targetVserver")
|
|
|
+ addNSObject "gslb vserver" (getNSObjects ($filteredConfig) "gslb vserver" "-targetVserver")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+# Get Next Factors, Authentication Policies and Login Schemas from Authentication Policy Labels
|
|
|
+if ($NSObjects."authentication policylabel") {
|
|
|
+ # Get Next Factors; repeat multiple times for Next Factor nesting level
|
|
|
+ for ($i=0;$i -le $nFactorNestingLevel; $i++) {
|
|
|
+ foreach ($policy in $NSObjects."authentication policylabel") {
|
|
|
+ addNSObject "authentication policylabel" (getNSObjects ($config -match " $policy ") "authentication policylabel" "-nextFactor")
|
|
|
+ }
|
|
|
+ }
|
|
|
+
|
|
|
+ foreach ($policy in $NSObjects."authentication policylabel") {
|
|
|
+ addNSObject "authentication policy" (getNSObjects ($config -match " $policy ") "authentication policy")
|
|
|
+ addNSObject "authentication loginSchema" (getNSObjects ($config -match " $policy ") "authentication loginSchema")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Sort the Policy Labels so Next Factors are created prior to policy bindings in earlier factors
|
|
|
+if ($NSObjects."authentication policylabel") {
|
|
|
+ $policyLabelsSorted = @()
|
|
|
+ foreach ($policyLabel in $NSObjects."authentication policylabel") {
|
|
|
+ $policyBindings = $config -match ('^bind authentication policylabel ' + $policyLabel + " -(policy|policyName) ")
|
|
|
+ $nextFactors = $policyBindings | select-string -Pattern ('-nextFactor (".*?"|[^-"]\S+)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ if (-not $nextFactors) {
|
|
|
+ $policyLabelsSorted = ,$policyLabel + $policyLabelsSorted
|
|
|
+ } else {
|
|
|
+ foreach ($nextFactor in $nextFactors) {
|
|
|
+ if ($policyLabelsSorted -contains $nextFactor) {
|
|
|
+ $policyLabelsSorted = $policyLabelsSorted + ,$policyLabel
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+ for ($i=0; $i -lt $nFactorNestingLevel; $i++) {
|
|
|
+ foreach ($policyLabel in $NSObjects."authentication policylabel") {
|
|
|
+ $policyBindings = $config -match ('^bind authentication policylabel ' + $policyLabel + " -(policy|policyName) ")
|
|
|
+ $nextFactors = $policyBindings | select-string -Pattern ('-nextFactor (".*?"|[^-"]\S+)') | ForEach-Object {$_.Matches.Groups[1].value}
|
|
|
+ foreach ($nextFactor in $nextFactors) {
|
|
|
+ if ($policyLabelsSorted -contains $nextFactor) {
|
|
|
+ $policyLabelsSorted = $policyLabelsSorted + ,$policyLabel
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+ }
|
|
|
+ $NSObjects."authentication policylabel" = $policyLabelsSorted
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Authentication Actions from Advanced Authentication Policies
|
|
|
+if ($NSObjects."authentication policy") {
|
|
|
+ $matchExpression = getMatchExpression $NSObjects."authentication policy"
|
|
|
+ $filteredConfig = $config -match "authentication policy $matchExpression "
|
|
|
+ addNSObject "authentication ldapAction" (getNSObjects ($filteredConfig) "authentication ldapAction")
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($filteredConfig) "audit messageaction" "-logAction")
|
|
|
+ addNSObject "authentication radiusAction" (getNSObjects ($filteredConfig) "authentication radiusAction")
|
|
|
+ addNSObject "authentication samlAction" (getNSObjects ($filteredConfig) "authentication samlAction" -position 4)
|
|
|
+ addNSObject "authentication certAction" (getNSObjects ($filteredConfig) "authentication certAction")
|
|
|
+ addNSObject "authentication dfaAction" (getNSObjects ($filteredConfig) "authentication dfaAction")
|
|
|
+ addNSObject "authentication epaAction" (getNSObjects ($filteredConfig) "authentication epaAction")
|
|
|
+ addNSObject "authentication negotiateAction" (getNSObjects ($filteredConfig) "authentication negotiateAction")
|
|
|
+ addNSObject "authentication OAuthAction" (getNSObjects ($filteredConfig) "authentication OAuthAction")
|
|
|
+ addNSObject "authentication storefrontAuthAction" (getNSObjects ($filteredConfig) "authentication storefrontAuthAction")
|
|
|
+ addNSObject "authentication tacacsAction" (getNSObjects ($filteredConfig) "authentication tacacsAction")
|
|
|
+ addNSObject "authentication webAuthAction" (getNSObjects ($filteredConfig) "authentication webAuthAction")
|
|
|
+ addNSObject "authentication emailAction" (getNSObjects ($filteredConfig) "authentication emailAction")
|
|
|
+ addNSObject "authentication noAuthAction" (getNSObjects ($filteredConfig) "authentication noAuthAction")
|
|
|
+ addNSObject "authentication captchaAction" (getNSObjects ($filteredConfig) "authentication captchaAction")
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get LDAP Actions from LDAP Policies
|
|
|
+if ($NSObjects."authentication ldapPolicy") {
|
|
|
+ foreach ($policy in $NSObjects."authentication ldapPolicy") {
|
|
|
+ addNSObject "authentication ldapAction" (getNSObjects ($config -match "authentication ldapPolicy $policy ") "authentication ldapAction")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get RADIUS Actions from RADIUS Policies
|
|
|
+if ($NSObjects."authentication radiusPolicy") {
|
|
|
+ foreach ($policy in $NSObjects."authentication radiusPolicy") {
|
|
|
+ addNSObject "authentication radiusAction" (getNSObjects ($config -match "authentication radiusPolicy $policy ") "authentication radiusAction" -position 4)
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Cert Actions from Cert Policies
|
|
|
+if ($NSObjects."authentication certPolicy") {
|
|
|
+ foreach ($policy in $NSObjects."authentication certPolicy") {
|
|
|
+ addNSObject "authentication certAction" (getNSObjects ($config -match "authentication certPolicy $policy ") "authentication certAction" -position 4)
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get DFA Actions from DFA Policies
|
|
|
+if ($NSObjects."authentication dfaPolicy") {
|
|
|
+ foreach ($policy in $NSObjects."authentication dfaPolicy") {
|
|
|
+ addNSObject "authentication dfaAction" (getNSObjects ($config -match "authentication dfaPolicy $policy ") "authentication dfaAction")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Negotiate Actions from Negotiate Policies
|
|
|
+if ($NSObjects."authentication negotiatePolicy") {
|
|
|
+ foreach ($policy in $NSObjects."authentication negotiatePolicy") {
|
|
|
+ addNSObject "authentication negotiateAction" (getNSObjects ($config -match "authentication negotiatePolicy $policy ") "authentication negotiateAction")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get TACACS Actions from TACACS Policies
|
|
|
+if ($NSObjects."authentication tacacsPolicy") {
|
|
|
+ foreach ($policy in $NSObjects."authentication tacacsPolicy") {
|
|
|
+ addNSObject "authentication tacacsAction" (getNSObjects ($config -match "authentication tacacsPolicy $policy ") "authentication tacacsAction")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Web Auth Actions from Web Auth Policies
|
|
|
+if ($NSObjects."authentication webAuthPolicy") {
|
|
|
+ foreach ($policy in $NSObjects."authentication webAuthPolicy") {
|
|
|
+ addNSObject "authentication webAuthAction" (getNSObjects ($config -match "authentication webAuthPolicy $policy ") "authentication webAuthAction")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get SAML iDP Profiles from SAML iDP Policies
|
|
|
+if ($NSObjects."authentication samlIdPPolicy") {
|
|
|
+ foreach ($policy in $NSObjects."authentication samlIdPPolicy") {
|
|
|
+ addNSObject "authentication samlIdPProfile" (getNSObjects ($config -match "authentication samlIdPPolicy $policy ") "authentication samlIdPProfile" -position 4)
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($config -match "authentication samlIdPPolicy $policy") "audit messageaction" "-logAction")
|
|
|
+ }
|
|
|
+
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get SAML Actions from SAML Authentication Policies
|
|
|
+if ($NSObjects."authentication samlPolicy") {
|
|
|
+ $matchExpression = GetMatchExpression $NSObjects."authentication samlPolicy"
|
|
|
+ addNSObject "authentication samlAction" (getNSObjects ($config -match "authentication samlPolicy $matchExpression ") "authentication samlAction" -position 4)
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get SSL Certificates from SAML Actions, SAML Profiles, and ADFS Proxy Profiles
|
|
|
+if ($NSObjects."authentication samlAction") {
|
|
|
+ $matchExpression = GetMatchExpression $NSObjects."authentication samlAction"
|
|
|
+ $filteredConfig = $config -match "authentication samlAction $matchExpression "
|
|
|
+ addNSObject "ssl certKey" (getNSObjects ($filteredConfig) "ssl certKey" "-samlIdPCertName")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects ($filteredConfig) "ssl certKey" "-samlSigningCertName")
|
|
|
+}
|
|
|
+
|
|
|
+if ($NSObjects."authentication samlIdPProfile") {
|
|
|
+ $matchExpression = GetMatchExpression $NSObjects."authentication samlIdPProfile"
|
|
|
+ $filteredConfig = $config -match "authentication samlIdPProfile $matchExpression "
|
|
|
+ addNSObject "ssl certKey" (getNSObjects ($filteredConfig) "ssl certKey" "-samlIdPCertName")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects ($filteredConfig) "ssl certKey" "-samlSPCertName")
|
|
|
+}
|
|
|
+
|
|
|
+foreach ($action in $NSObjects."authentication adfsProxyProfile") {
|
|
|
+ addNSObject "ssl certKey" (getNSObjects ($config -match "authentication adfsProxyProfile $action ") "ssl certKey" "-certKeyName")
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+# Get Push Service from LDAP Actions
|
|
|
+foreach ($action in $NSObjects."authentication ldapAction") {
|
|
|
+ addNSObject "authentication pushService" (getNSObjects ($config -match "authentication ldapAction $action ") "authentication pushService" "-pushService")
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Default AAA Groups from Authentication Actions
|
|
|
+foreach ($action in $NSObjects."authentication certAction") {
|
|
|
+ addNSObject "aaa group" (getNSObjects ($config -match "authentication certAction $action ") "aaa group" "-defaultAuthenticationGroup")
|
|
|
+}
|
|
|
+foreach ($action in $NSObjects."authentication dfaAction") {
|
|
|
+ addNSObject "aaa group" (getNSObjects ($config -match "authentication dfaAction $action ") "aaa group" "-defaultAuthenticationGroup")
|
|
|
+}
|
|
|
+foreach ($action in $NSObjects."authentication epaAction") {
|
|
|
+ addNSObject "aaa group" (getNSObjects ($config -match "authentication epaAction $action ") "aaa group" "-defaultEPAGroup")
|
|
|
+ addNSObject "aaa group" (getNSObjects ($config -match "authentication epaAction $action ") "aaa group" "-quarantineGroup")
|
|
|
+}
|
|
|
+foreach ($action in $NSObjects."authentication ldapAction") {
|
|
|
+ addNSObject "aaa group" (getNSObjects ($config -match "authentication ldapAction $action ") "aaa group" "-defaultAuthenticationGroup")
|
|
|
+}
|
|
|
+foreach ($action in $NSObjects."authentication negotiateAction") {
|
|
|
+ addNSObject "aaa group" (getNSObjects ($config -match "authentication negotiateAction $action ") "aaa group" "-defaultAuthenticationGroup")
|
|
|
+}
|
|
|
+foreach ($action in $NSObjects."authentication OAuthAction") {
|
|
|
+ addNSObject "aaa group" (getNSObjects ($config -match "authentication OAuthAction $action ") "aaa group" "-defaultAuthenticationGroup")
|
|
|
+}
|
|
|
+foreach ($action in $NSObjects."authentication radiusAction") {
|
|
|
+ addNSObject "aaa group" (getNSObjects ($config -match "authentication radiusAction $action ") "aaa group" "-defaultAuthenticationGroup")
|
|
|
+}
|
|
|
+foreach ($action in $NSObjects."authentication samlAction") {
|
|
|
+ addNSObject "aaa group" (getNSObjects ($config -match "authentication samlAction $action ") "aaa group" "-defaultAuthenticationGroup")
|
|
|
+}
|
|
|
+foreach ($action in $NSObjects."authentication webAuthAction") {
|
|
|
+ addNSObject "aaa group" (getNSObjects ($config -match "authentication webAuthAction $action ") "aaa group" "-defaultAuthenticationGroup")
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get SSL Objects from SSL vServers
|
|
|
+if ($NSObjects."ssl vserver") {
|
|
|
+ $matchExpression = getMatchExpression $NSObjects."ssl vserver"
|
|
|
+ $filteredConfig = $config -match " ssl vserver $matchExpression "
|
|
|
+ addNSObject "ssl cipher" (getNSObjects ($filteredConfig) "ssl cipher" "-cipherName")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects ($filteredConfig) "ssl certKey" "-certkeyName")
|
|
|
+ addNSObject "ssl certKey" (getNSObjects ($filteredConfig) "ssl certKey" "-cacert")
|
|
|
+ addNSObject "ssl logprofile" (getNSObjects ($filteredConfig) "ssl logprofile" "-ssllogprofile")
|
|
|
+ addNSObject "ssl profile" (getNSObjects ($filteredConfig) "ssl profile" "-sslProfile")
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get objects linked to certKeys
|
|
|
+if ($NSObjects."ssl certKey") {
|
|
|
+ foreach ($certKey in $NSObjects."ssl certKey") {
|
|
|
+ $certKey = $certKey -replace "\.", "\."
|
|
|
+ $certKey = $certKey -replace "\*", "\*"
|
|
|
+
|
|
|
+ # Get FIPS Keys from SSL Certs
|
|
|
+ addNSObject "ssl fipsKey" (getNSObjects ($config -match "add ssl certKey $certKey ") "ssl fipsKey" "-fipsKey")
|
|
|
+
|
|
|
+ # Get HSM Keys from SSL Certs
|
|
|
+ addNSObject "ssl hsmKey" (getNSObjects ($config -match "add ssl certKey $certKey ") "ssl hsmKey" "-hsmKey")
|
|
|
+
|
|
|
+ # Put Server Cerficates in different bucket than CA Certificates
|
|
|
+ addNSObject "ssl cert" ($config -match "add ssl certKey $certKey") "ssl certKey"
|
|
|
+
|
|
|
+ # CA Certs are seperate section so they can be outputted before server certs
|
|
|
+ $CACert = getNSObjects ($config -match "link ssl certKey $certKey ") "ssl certKey"
|
|
|
+ foreach ($cert in $CACert) { if ($cert -notmatch $certKey) {$CACert = $cert} }
|
|
|
+ if ($CACert) {
|
|
|
+ addNSObject "ssl cert" ($config -match "add ssl certKey $CACert") "ssl certKey"
|
|
|
+ addNSObject "ssl link" ($config -match "link ssl certKey $certKey") "ssl certKey"
|
|
|
+ $certKey = $CACert
|
|
|
+ }
|
|
|
+
|
|
|
+ # Intermediate certs are sometimes linked to other intermediates
|
|
|
+ $CACert = getNSObjects ($config -match "link ssl certKey $CACert ") "ssl certKey"
|
|
|
+ foreach ($cert in $CACert) { if ($cert -notmatch $certKey) {$CACert = $cert} }
|
|
|
+ if ($CACert) {
|
|
|
+ addNSObject "ssl cert" ($config -match "add ssl certKey $CACert") "ssl certKey"
|
|
|
+ addNSObject "ssl link" ($config -match "link ssl certKey $certKey") "ssl certKey"
|
|
|
+ $certKey = $CACert
|
|
|
+ }
|
|
|
+
|
|
|
+
|
|
|
+ # Intermedicate certs are sometimes linked to root certs
|
|
|
+ $CACert = getNSObjects ($config -match "link ssl certKey $CACert ") "ssl certKey"
|
|
|
+ foreach ($cert in $CACert) { if ($cert -notmatch $certKey) {$CACert = $cert} }
|
|
|
+ if ($CACert) {
|
|
|
+ addNSObject "ssl cert" ($config -match "add ssl certKey $CACert") "ssl certKey"
|
|
|
+ addNSObject "ssl link" ($config -match "link ssl certKey $certKey") "ssl certKey"
|
|
|
+ }
|
|
|
+
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Azure Key Vaults from HSM Keys
|
|
|
+if ($NSObjects."ssl hmsKey") {
|
|
|
+ foreach ($hmsKey in $NSObjects."ssl hmsKey") {
|
|
|
+ addNSObject "azure keyvault" (getNSObjects ($config -match "add ssl hsmKey $hsmKey ") "azure keyvault" "-keystore")
|
|
|
+ }
|
|
|
+
|
|
|
+ # Get callout root certificates
|
|
|
+ addNSObject "ssl cert" ($config -match "bind ssl cacertGroup ns_callout_certs ") "ssl certKey"
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Azure Applications from Azure Key Vaults
|
|
|
+if ($NSObjects."azure keyvault") {
|
|
|
+ foreach ($vault in $NSObjects."azure keyVault") {
|
|
|
+ addNSObject "azure application" (getNSObjects ($config -match "add azure keyVault $vault ") "azure application" "-azureApplication")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Objects linked to Monitors
|
|
|
+if ($NSObjects.monitor) {
|
|
|
+ foreach ($monitor in $NSObjects.monitor) {
|
|
|
+ $monitorConfig = $config -match " monitor $monitor "
|
|
|
+ addNSObject "netProfile" (getNSObjects $monitorConfig "netProfile" "-netProfile")
|
|
|
+ addNSObject "ns trafficDomain" (getNSObjects $monitorConfig "ns trafficDomain" "-td")
|
|
|
+ addNSObject "aaa kcdAccount" (getNSObjects $monitorConfig "aaa kcdAccount" "-kcdAccount")
|
|
|
+ addNSObject "ssl profile" (getNSObjects $monitorConfig "ssl profile" "-sslProfile")
|
|
|
+ addNSObject "lb metricTable" (getNSObjects $monitorConfig "lb metricTable" "-metricTable")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get VPN Clientless Profiles from VPN Clientless Policies
|
|
|
+if ($NSObjects."vpn clientlessAccessPolicy") {
|
|
|
+ foreach ($policy in $NSObjects."vpn clientlessAccessPolicy") {
|
|
|
+ addNSObject "vpn clientlessAccessProfile" (getNSObjects ($config -match " vpn clientlessAccessPolicy $policy ") "vpn clientlessAccessProfile" -position 4)
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Rewrite PolicyLabels from VPN Clientless Profiles
|
|
|
+if ($NSObjects."vpn clientlessAccessProfile") {
|
|
|
+ foreach ($Profile in $NSObjects."vpn clientlessAccessProfile") {
|
|
|
+ addNSObject "rewrite policylabel" (getNSObjects ($config -match " vpn clientlessAccessProfile $Profile ") "rewrite policylabel" -position 4)
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get global filter bindings, filter actions, and forwarding services
|
|
|
+
|
|
|
+if ($config -match "enable ns feature.* CF") {
|
|
|
+ addNSObject "filter policy" (getNSObjects ($config -match "bind filter global ") "filter policy")
|
|
|
+ if ($NSObjects."filter policy") {
|
|
|
+ # Get Filter Actions from Filter Policies
|
|
|
+ foreach ($policy in $NSObjects."filter policy") {
|
|
|
+ addNSObject "filter action" (getNSObjects ($config -match "filter policy $policy ") "filter action")
|
|
|
+ }
|
|
|
+ # Get Forwarding Services from Filter Actions
|
|
|
+ foreach ($action in $NSObjects."filter action") {
|
|
|
+ addNSObject "service" (getNSObjects ($config -match "filter action $action ") "service" "forward")
|
|
|
+ }
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+ if ($config -match "enable ns feature.* IC") {
|
|
|
+ $NSObjects."cache parameter" = @("enable ns feature IC")
|
|
|
+ # Get Cache Policies from Global Cache Bindings
|
|
|
+ addNSObject "cache policylabel" (getNSObjects ($config -match "bind cache global ") "cache policylabel")
|
|
|
+ addNSObject "cache Policy" (getNSObjects ($config -match "bind cache global ") "cache Policy")
|
|
|
+ addNSObject "cache parameter" ($config -match "set cache parameter ") "cache parameter"
|
|
|
+ addNSObject "cache global" ($config -match "bind cache global ") "cache global"
|
|
|
+} else {
|
|
|
+ $NSObjects."cache parameter" = @("# *** Integrated Caching feature is not enabled. Cache Global bindings skipped.")
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+# Get Cache Policies from Cache Policy Labels
|
|
|
+if ($NSObjects."cache policylabel") {
|
|
|
+ foreach ($policy in $NSObjects."cache policylabel") {
|
|
|
+ addNSObject "cache Policy" (getNSObjects ($config -match " $policy ") "cache Policy")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Cache Content Groups from Cache Policies
|
|
|
+if ($NSObjects."cache policy") {
|
|
|
+ foreach ($policy in $NSObjects."cache policy") {
|
|
|
+ addNSObject "cache contentGroup" (getNSObjects ($config -match " $policy ") "cache contentGroup")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Cache Selectors from Cache Content Groups
|
|
|
+if ($NSObjects."cache contentGroup") {
|
|
|
+ foreach ($policy in $NSObjects."cache contentGroup") {
|
|
|
+ addNSObject "cache selector" (getNSObjects ($config -match " $policy ") "cache selector")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Global Responder Bindings
|
|
|
+addNSObject "responder policy" (getNSObjects ($config -match "bind responder global ") "responder policy")
|
|
|
+addNSObject "responder policylabel" (getNSObjects ($config -match "bind responder global ") "responder policylabel")
|
|
|
+
|
|
|
+
|
|
|
+# Get Responder Policies from Responder Policy Labels
|
|
|
+if ($NSObjects."responder policylabel") {
|
|
|
+ foreach ($policy in $NSObjects."responder policylabel") {
|
|
|
+ addNSObject "responder Policy" (getNSObjects ($config -match " $policy ") "responder Policy")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Responder Actions and Responder Global Settings
|
|
|
+if ($NSObjects."responder policy") {
|
|
|
+ $matchExpression = getMatchExpression $NSObjects."responder policy"
|
|
|
+ $filteredConfig = $config -match " responder policy $matchExpression "
|
|
|
+ addNSObject "responder action" (getNSObjects ($filteredConfig) "responder action")
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($filteredConfig) "audit messageaction" "-logAction")
|
|
|
+ addNSObject "ns assignment" (getNSObjects ($filteredConfig) "ns assignment")
|
|
|
+ if ($config -match "enable ns feature.* RESPONDER") {
|
|
|
+ $NSObjects."responder param" = @("enable ns feature RESPONDER")
|
|
|
+ } else {
|
|
|
+ $NSObjects."responder param" = @("# *** Responder feature is not enabled")
|
|
|
+ }
|
|
|
+ addNSObject "responder param" ($config -match "set responder param ") "responder param"
|
|
|
+ addNSObject "responder global" ($config -match "bind responder global ") "responder global"
|
|
|
+
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Rewrite Policies from Global Rewrite Bindings
|
|
|
+addNSObject "rewrite policy" (getNSObjects ($config -match "bind rewrite global ") "rewrite policy")
|
|
|
+addNSObject "rewrite policylabel" (getNSObjects ($config -match "bind rewrite global ") "rewrite policylabel")
|
|
|
+
|
|
|
+
|
|
|
+# Get Rewrite Policies from Rewrite Policy Labels
|
|
|
+if ($NSObjects."rewrite policylabel") {
|
|
|
+ $matchExpression = getMatchExpression $NSObjects."rewrite policylabel"
|
|
|
+ addNSObject "rewrite Policy" (getNSObjects ($config -match " $matchExpression ") "rewrite Policy")
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Rewrite Actions and Rewrite Global Settings
|
|
|
+if ($NSObjects."rewrite policy") {
|
|
|
+ $matchExpression = getMatchExpression $NSObjects."rewrite policy"
|
|
|
+ $filteredConfig = $config -match "rewrite policy $matchExpression "
|
|
|
+ addNSObject "rewrite action" (getNSObjects ($filteredConfig) "rewrite action")
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($filteredConfig) "audit messageaction" "-logAction")
|
|
|
+
|
|
|
+ if ($config -match "enable ns feature.* rewrite") {
|
|
|
+ $NSObjects."rewrite param" = @("enable ns feature rewrite")
|
|
|
+ } else {
|
|
|
+ $NSObjects."rewrite param" = @("# *** Rewrite feature is not enabled")
|
|
|
+ }
|
|
|
+ addNSObject "rewrite param" ($config -match "set rewrite param ") "rewrite param"
|
|
|
+ addNSObject "rewrite global" ($config -match "bind rewrite global ") "rewrite global"
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Compression Policies from Global Compression Bindings
|
|
|
+addNSObject "cmp policy" (getNSObjects ($config -match "bind cmp global ") "cmp policy")
|
|
|
+addNSObject "cmp policylabel" (getNSObjects ($config -match "bind cmp global ") "cmp policylabel")
|
|
|
+
|
|
|
+
|
|
|
+# Get Compression Policies from Compression Policy Labels
|
|
|
+if ($NSObjects."cmp policylabel") {
|
|
|
+ foreach ($policy in $NSObjects."cmp policylabel") {
|
|
|
+ addNSObject "cmp policy" (getNSObjects ($config -match "cmp policylabel $policy ") "cmp policy")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Compression Actions and Compression Global Settings
|
|
|
+if ($NSObjects."cmp policy") {
|
|
|
+ foreach ($policy in $NSObjects."cmp policy") {
|
|
|
+ addNSObject "cmp action" (getNSObjects ($config -match "cmp policy $Pplicy ") "cmp action")
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($config -match "cmp policy $policy") "audit messageaction" "-logAction")
|
|
|
+ }
|
|
|
+ if ($config -match "enable ns feature.* cmp") {
|
|
|
+ $NSObjects."cmp parameter" = @("enable ns feature cmp")
|
|
|
+ } else {
|
|
|
+ $NSObjects."cmp parameter" = @("# *** Compression feature is not enabled")
|
|
|
+ }
|
|
|
+ addNSObject "cmp parameter" ($config -match "set cmp parameter ") "cmp parameter"
|
|
|
+ addNSObject "cmp global" ($config -match "bind cmp global ") "cmp global"
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get global bound Traffic Management Policies
|
|
|
+$filteredConfig = $config -match "bind tm global"
|
|
|
+addNSObject "tm trafficPolicy" (getNSObjects ($filteredConfig) "tm trafficPolicy")
|
|
|
+addNSObject "tm sessionPolicy" (getNSObjects ($filteredConfig) "tm sessionPolicy")
|
|
|
+addNSObject "audit syslogPolicy" (getNSObjects ($filteredConfig) "audit syslogPolicy")
|
|
|
+addNSObject "audit nslogPolicy" (getNSObjects ($filteredConfig) "audit nslogPolicy")
|
|
|
+addNSObject "tm global" ($filteredConfig) "tm global"
|
|
|
+
|
|
|
+
|
|
|
+# Get AAA Traffic Actions from AAA Traffic Policies
|
|
|
+if ($NSObjects."tm trafficPolicy") {
|
|
|
+ $matchExpression = getMatchExpression $NSObjects."tm trafficPolicy"
|
|
|
+ addNSObject "tm trafficAction" (getNSObjects ($config -match " $matchExpression ") "tm trafficAction" -position 4)
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get KCD Accounts and SSO Profiles from AAA Traffic Actions
|
|
|
+if ($NSObjects."tm trafficAction") {
|
|
|
+ $matchExpression = getMatchExpression $NSObjects."tm trafficAction"
|
|
|
+ $filteredConfig = $config -match "tm trafficAction $matchExpression "
|
|
|
+ addNSObject "aaa kcdAccount" (getNSObjects ($filteredConfig) "aaa kcdAccount" "-kcdAccount")
|
|
|
+ addNSObject "tm formSSOAction" (getNSObjects ($filteredConfig) "tm formSSOAction" "-formSSOAction")
|
|
|
+ addNSObject "tm samlSSOProfile" (getNSObjects ($filteredConfig) "tm samlSSOProfile" "-samlSSOProfile")
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Authorization Policies from Authorization Policy Labels
|
|
|
+if ($NSObjects."authorization policylabel") {
|
|
|
+ foreach ($policy in $NSObjects."authorization policylabel") {
|
|
|
+ addNSObject "authorization policy" (getNSObjects ($config -match "authorization policy $policy ") "authorization policy")
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($config -match "authorization policy $policy") "audit messageaction" "-logAction")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get SmartControl Actions from SmartControl Policies
|
|
|
+if ($NSObjects."ica policy") {
|
|
|
+ foreach ($policy in $NSObjects."ica policy") {
|
|
|
+ addNSObject "ica action" (getNSObjects ($config -match "ica policy $policy ") "ica action" -position 4)
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($config -match "ica policy $policy") "audit messageaction" "-logAction")
|
|
|
+
|
|
|
+ }
|
|
|
+
|
|
|
+ # Get SmartControl Access Profiles from SmartControl Actions
|
|
|
+ if ($NSObjects."ica action") {
|
|
|
+ foreach ($policy in $NSObjects."ica action") {
|
|
|
+ addNSObject "ica accessprofile" (getNSObjects ($config -match " $policy ") "ica accessprofile" -position 4)
|
|
|
+ }
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get VPN Traffic Actions from VPN Traffic Policies
|
|
|
+if ($NSObjects."vpn trafficPolicy") {
|
|
|
+ foreach ($policy in $NSObjects."vpn trafficPolicy") {
|
|
|
+ addNSObject "vpn trafficAction" (getNSObjects ($config -match " $policy ") "vpn trafficAction" -position 4)
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get KCD Accounts and SSO Profiles from VPN Traffic Actions
|
|
|
+if ($NSObjects."vpn trafficAction") {
|
|
|
+ foreach ($profile in $NSObjects."vpn trafficAction") {
|
|
|
+ addNSObject "aaa kcdAccount" (getNSObjects ($config -match "vpn trafficAction $profile ") "aaa kcdAccount" "-kcdAccount")
|
|
|
+ addNSObject "vpn formSSOAction" (getNSObjects ($config -match "vpn trafficAction $profile ") "vpn formSSOAction" "-formSSOAction")
|
|
|
+ addNSObject "vpn samlSSOProfile" (getNSObjects ($config -match "vpn trafficAction $profile ") "vpn samlSSOProfile" "-samlSSOProfile")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get PCoIP and RDP Profiles, and AlwaysOn Profiles from VPN Session Actions
|
|
|
+if ($NSObjects."vpn sessionAction") {
|
|
|
+ foreach ($policy in $NSObjects."vpn sessionAction") {
|
|
|
+ addNSObject "vpn pcoipProfile" (getNSObjects ($config -match " $policy ") "vpn pcoipProfile" -position 4)
|
|
|
+ addNSObject "rdp clientprofile" (getNSObjects ($config -match " $policy ") "rdp clientprofile" -position 4)
|
|
|
+ addNSObject "vpn alwaysONProfile" (getNSObjects ($config -match " $policy ") "vpn alwaysONProfile" "-alwaysONProfileName")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get AAA Session Actions
|
|
|
+if ($NSObjects."tm sessionPolicy") {
|
|
|
+ foreach ($policy in $NSObjects."tm sessionPolicy") {
|
|
|
+ addNSObject "tm sessionAction" (getNSObjects ($config -match " $policy ") "tm sessionAction")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get KCD Accounts from AAA Session Actions
|
|
|
+if ($NSObjects."tm sessionAction") {
|
|
|
+ foreach ($profile in $NSObjects."tm sessionAction") {
|
|
|
+ addNSObject "aaa kcdAccount" (getNSObjects ($config -match "tm sessionAction $profile ") "aaa kcdAccount" "-kcdAccount")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Appflow Policies from Global Appflow Bindings
|
|
|
+addNSObject "appflow policy" (getNSObjects ($config -match "bind appflow global ") "appflow policy")
|
|
|
+addNSObject "appflow policylabel" (getNSObjects ($config -match "bind appflow global ") "appflow policylabel")
|
|
|
+
|
|
|
+
|
|
|
+# Get Appflow Policies from Appflow Policy Labels
|
|
|
+if ($NSObjects."appflow policylabel") {
|
|
|
+ foreach ($policy in $NSObjects."appflow policylabel") {
|
|
|
+ addNSObject "appflow Policy" (getNSObjects ($config -match " $policy ") "appflow Policy")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Appflow Actions from AppFlow Policies
|
|
|
+# Get AppFlow Global Settings
|
|
|
+if ($NSObjects."appflow policy") {
|
|
|
+ foreach ($policy in $NSObjects."appflow policy") {
|
|
|
+ addNSObject "appflow action" (getNSObjects ($config -match " $policy ") "appflow action")
|
|
|
+ }
|
|
|
+ # Get AppFlow Collector
|
|
|
+ if ($NSObjects."appflow action") {
|
|
|
+ foreach ($action in $NSObjects."appflow action") {
|
|
|
+ addNSObject "appflow collector" (getNSObjects ($config -match " $action ") "appflow collector" "-collectors")
|
|
|
+ }
|
|
|
+ }
|
|
|
+ if ($config -match "enable ns feature.* appflow") {
|
|
|
+ $NSObjects."appflow param" = @("enable ns feature appflow")
|
|
|
+ } else {
|
|
|
+ $NSObjects."appflow param" = @("# *** AppFlow feature is not enabled")
|
|
|
+ }
|
|
|
+ addNSObject "appflow param" ($config -match "set appflow param ")
|
|
|
+ addNSObject "appflow global" ($config -match "bind appflow global ") "appflow global"
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get AppQoE Actions from AppQoE Policies
|
|
|
+# Get AppQoE Global Settings
|
|
|
+if ($NSObjects."appqoe policy") {
|
|
|
+ foreach ($policy in $NSObjects."appqoe policy") {
|
|
|
+ addNSObject "appqoe action" (getNSObjects ($config -match " $policy ") "appqoe action")
|
|
|
+ }
|
|
|
+ if ($config -match "enable ns feature.* appqoe") {
|
|
|
+ $NSObjects."appqoe parameter" = @("enable ns feature appqoe")
|
|
|
+ } else {
|
|
|
+ $NSObjects."appqoe parameter" = @("# *** AppQoE feature is not enabled")
|
|
|
+ }
|
|
|
+ addNSObject "appqoe parameter" ($config -match "appqoe parameter") "appqoe parameter"
|
|
|
+ addNSObject "appqoe parameter" ($config -match "set qos parameters") "appqoe parameter"
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get AppFW Policies from Global AppFW Bindings
|
|
|
+addNSObject "appfw policy" (getNSObjects ($config -match "bind appfw global ") "appfw Policy")
|
|
|
+addNSObject "appfw policylabel" (getNSObjects ($config -match "bind appfw global ") "appfw policylabel")
|
|
|
+
|
|
|
+
|
|
|
+# Get AppFW Policies from AppFW Policy Labels
|
|
|
+if ($NSObjects."appfw policylabel") {
|
|
|
+ foreach ($policy in $NSObjects."appfw policylabel") {
|
|
|
+ addNSObject "appfw policy" (getNSObjects ($config -match " $policy ") "appfw policy")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get AppFW Profiles from AppFW Policies
|
|
|
+if ($NSObjects."appfw policy") {
|
|
|
+ foreach ($policy in $NSObjects."appfw policy") {
|
|
|
+ addNSObject "appfw profile" (getNSObjects ($config -match "appfw policy $policy ") "appfw profile")
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($config -match "appfw policy $policy") "audit messageaction" "-logAction")
|
|
|
+
|
|
|
+ }
|
|
|
+ if ($config -match "enable ns feature.* appfw") {
|
|
|
+ $NSObjects."appfw parameter" = @("enable ns feature appfw")
|
|
|
+ } else {
|
|
|
+ $NSObjects."appfw parameter" = @("# *** AppFW feature is not enabled")
|
|
|
+ }
|
|
|
+ addNSObject "appfw parameter" ($config -match "set appfw settings") "appfw parameter"
|
|
|
+ addNSObject "appfw global" ($config -match "bind appfw global ") "appfw global"
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Bot Policies from Global Bot Bindings
|
|
|
+addNSObject "bot policy" (getNSObjects ($config -match "bind bot global ") "bot Policy")
|
|
|
+addNSObject "bot policylabel" (getNSObjects ($config -match "bind bot global ") "bot policylabel")
|
|
|
+
|
|
|
+
|
|
|
+# Get Bot Policies from Bot Policy Labels
|
|
|
+if ($NSObjects."bot policylabel") {
|
|
|
+ foreach ($policy in $NSObjects."bot policylabel") {
|
|
|
+ addNSObject "bot policy" (getNSObjects ($config -match " $policy ") "bot policy")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Bot Profiles from Bot Policies
|
|
|
+if ($NSObjects."bot policy") {
|
|
|
+ foreach ($policy in $NSObjects."bot policy") {
|
|
|
+ addNSObject "bot profile" (getNSObjects ($config -match "bot policy $policy ") "bot profile")
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($config -match "bot policy $policy") "audit messageaction" "-logAction")
|
|
|
+
|
|
|
+ }
|
|
|
+ if ($config -match "enable ns feature.* Bot") {
|
|
|
+ $NSObjects."bot parameter" = @("enable ns feature Bot")
|
|
|
+ } else {
|
|
|
+ $NSObjects."bot parameter" = @("# *** Bot Management feature is not enabled")
|
|
|
+ }
|
|
|
+ addNSObject "bot parameter" ($config -match "set appfw settings") "bot parameter"
|
|
|
+ addNSObject "bot global" ($config -match "bind appfw global ") "bot global"
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Login Schemas from Login Schema Policies
|
|
|
+if ($NSObjects."authentication loginSchemaPolicy") {
|
|
|
+ foreach ($policy in $NSObjects."authentication loginSchemaPolicy") {
|
|
|
+ addNSObject "authentication loginSchema" (getNSObjects ($config -match "authentication loginSchemaPolicy $policy ") "authentication loginSchema")
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($config -match "authentication loginSchemaPolicy $policy") "audit messageaction" "-logAction")
|
|
|
+
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get KCD Accounts from Database Profiles
|
|
|
+if ($NSObjects."db dbProfile") {
|
|
|
+ foreach ($profile in $NSObjects."db dbProfile") {
|
|
|
+ addNSObject "aaa kcdAccount" (getNSObjects ($config -match " db dbProfile $profile ") "aaa kcdAccount")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Transform Policies from Global Transform Bindings
|
|
|
+addNSObject "transform policy" (getNSObjects ($config -match "bind transform global ") "transform policy")
|
|
|
+addNSObject "transform policylabel" (getNSObjects ($config -match "bind transform global ") "transform policylabel")
|
|
|
+
|
|
|
+
|
|
|
+# Get Transform Policies from Transform Policy Labels
|
|
|
+if ($NSObjects."transform policylabel") {
|
|
|
+ foreach ($policy in $NSObjects."transform policylabel") {
|
|
|
+ addNSObject "transform policy" (getNSObjects ($config -match " $policy ") "transform policy")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Transform Actions and Profiles from Transform Policies
|
|
|
+if ($NSObjects."transform policy") {
|
|
|
+ foreach ($policy in $NSObjects."transform policy") {
|
|
|
+ addNSObject "transform action" (getNSObjects ($config -match " transform policy $policy ") "transform action")
|
|
|
+ addNSObject "audit messageaction" (getNSObjects ($config -match "transform policy $policy") "audit messageaction" "-logAction")
|
|
|
+ }
|
|
|
+ foreach ($action in $NSObjects."transform action") {
|
|
|
+ addNSObject "transform profile" (getNSObjects ($config -match " transform action $action ") "transform profile")
|
|
|
+ }
|
|
|
+ addNSObject "transform global" ($config -match "bind transform global ") "transform global"
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# If FEO feature is enabled, get global FEO settings
|
|
|
+addNSObject "feo policy" (getNSObjects ($config -match "bind feo global ") "feo Policy")
|
|
|
+
|
|
|
+
|
|
|
+# Get FEO Actions from FEO Policies
|
|
|
+# Get FEO Global Settings
|
|
|
+if ($NSObjects."feo policy") {
|
|
|
+ foreach ($policy in $NSObjects."feo policy") {
|
|
|
+ addNSObject "feo action" (getNSObjects ($config -match " feo policy $policy ") "feo action")
|
|
|
+ }
|
|
|
+ if ($config -match "enable ns feature.* feo") {
|
|
|
+ $NSObjects."feo parameter" = @("enable ns feature feo")
|
|
|
+ } else {
|
|
|
+ $NSObjects."feo parameter" = @("# feo feature is not enabled")
|
|
|
+ }
|
|
|
+ addNSObject "feo parameter" ($config -match "set feo param ") "feo parameter"
|
|
|
+ addNSObject "feo global" ($config -match "bind feo global ") "feo global"
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Spillover Actions from Spillover Policies
|
|
|
+if ($NSObjects."spillover policy") {
|
|
|
+ foreach ($policy in $NSObjects."spillover policy") {
|
|
|
+ addNSObject "spillover action" (getNSObjects ($config -match " spillover policy $policy ") "spillover action")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+# Get Audit Syslog Actions from Audit Syslog Policies
|
|
|
+if ($NSObjects."audit syslogpolicy") {
|
|
|
+ foreach ($policy in $NSObjects."audit syslogpolicy") {
|
|
|
+ addNSObject "audit syslogaction" (getNSObjects ($config -match " audit syslogpolicy $policy ") "audit syslogaction")
|
|
|
+ }
|
|
|
+ addNSObject "audit syslogactionglobal" ($config -match "audit syslogParams ") "audit syslogactionglobal"
|
|
|
+ addNSObject "audit syslogactionglobal" ($config -match "bind audit syslogactionglobal ") "audit syslogactionglobal"
|
|
|
+ addNSObject "audit syslogactionglobal" ($config -match "bind audit syslogGlobal ") "audit syslogactionglobal"
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Audit Nslog Policies from Global Audit Nslog Bindings
|
|
|
+addNSObject "audit nslogpolicy" (getNSObjects ($config -match "bind audit nslogglobal ") "audit nslogpolicy")
|
|
|
+
|
|
|
+
|
|
|
+# Get Audit Nslog Actions from Audit Nslog Policies
|
|
|
+if ($NSObjects."audit nslogpolicy") {
|
|
|
+ foreach ($policy in $NSObjects."audit nslogpolicy") {
|
|
|
+ addNSObject "audit nslogaction" (getNSObjects ($config -match " audit nslogpolicy $policy ") "audit nslogaction")
|
|
|
+ }
|
|
|
+ addNSObject "audit nslogactionglobal" ($config -match "bind audit syslogactionglobal ") "audit nslogactionglobal"
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get SSL Policies from Global SSL Bindings
|
|
|
+addNSObject "ssl policy" (getNSObjects ($config -match "bind ssl global ") "ssl policy")
|
|
|
+addNSObject "ssl policylabel" (getNSObjects ($config -match "bind ssl global ") "ssl policylabel")
|
|
|
+
|
|
|
+
|
|
|
+# Get SSL Policies from SSL Policy Labels
|
|
|
+if ($NSObjects."ssl policylabel") {
|
|
|
+ foreach ($policy in $NSObjects."ssl policylabel") {
|
|
|
+ addNSObject "ssl policy" (getNSObjects ($config -match " $policy ") "ssl policy")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get SSL Actions from SSL Policies
|
|
|
+if ($NSObjects."ssl policy") {
|
|
|
+ foreach ($ssl in $NSObjects."ssl policy") {
|
|
|
+ addNSObject "ssl action" (getNSObjects ($config -match " $ssl ") "ssl action")
|
|
|
+ }
|
|
|
+ addNSObject "ssl global" ($config -match "bind ssl global ") "ssl global"
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get SSL Log Profiles from SSL Actions
|
|
|
+if ($NSObjects."ssl action") {
|
|
|
+ foreach ($ssl in $NSObjects."ssl action") {
|
|
|
+ addNSObject "ssl logprofile" (getNSObjects ($config -match " $ssl ") "ssl logprofile" "-ssllogprofile")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get SSL Global Settings
|
|
|
+if ($config -match "enable ns feature.* ssl") {
|
|
|
+ $NSObjects."ssl parameter" = @("enable ns feature ssl")
|
|
|
+} else {
|
|
|
+ $NSObjects."ssl parameter" = @("# ssl feature is not enabled")
|
|
|
+}
|
|
|
+addNSObject "ssl parameter" ($config -match "set ssl parameter") "ssl parameter"
|
|
|
+addNSObject "ssl parameter" ($config -match "set ssl fips") "ssl parameter"
|
|
|
+addNSObject "ssl parameter" ($config -match "set ssl profile ns_default_ssl_profile_backend") "ssl parameter"
|
|
|
+
|
|
|
+
|
|
|
+# Get Ciphers from SSL profiles
|
|
|
+if ($NSObjects."ssl profile") {
|
|
|
+ foreach ($ssl in $NSObjects."ssl profile") {
|
|
|
+ addNSObject "ssl cipher" (getNSObjects ($config -match "bind ssl profile $ssl ") "ssl cipher" "-cipherName")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+# Get Global Policy Parameters
|
|
|
+addNSObject "policy param" ($config -match "set policy param") "policy param"
|
|
|
+
|
|
|
+
|
|
|
+# Get ACLs and RNAT
|
|
|
+addNSObject "ns acl" ($config -match "ns acl") "ns acl"
|
|
|
+addNSObject "ns acl" ($config -match "ns simpleacl") "ns acl"
|
|
|
+addNSObject "rnat" (getNSObjects ($config -match "rnat ") "rnat")
|
|
|
+
|
|
|
+
|
|
|
+# Get Limit Selectors from Limit Identifiers
|
|
|
+if ($NSObjects."ns limitIdentifier") {
|
|
|
+ foreach ($identifier in $NSObjects."ns limitIdentifier") {
|
|
|
+ addNSObject "ns limitSelector" (getNSObjects ($config -match "ns limitIdentifier $identifier ") "ns limitSelector" "-selectorName")
|
|
|
+ addNSObject "stream selector" (getNSObjects ($config -match "ns limitIdentifier $identifier ") "stream selector")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Get Stream Selectors from Stream Identifiers
|
|
|
+if ($NSObjects."stream identifier") {
|
|
|
+ foreach ($identifier in $NSObjects."ns limitIdentifier") {
|
|
|
+ addNSObject "ns limitSelector" (getNSObjects ($config -match "stream identifier $identifier ") "ns limitSelector")
|
|
|
+ addNSObject "stream selector" (getNSObjects ($config -match "stream identifier $identifier ") "stream selector")
|
|
|
+ }
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# Output Extracted Config
|
|
|
+
|
|
|
+
|
|
|
+#cls
|
|
|
+"`nExtracted Objects"
|
|
|
+$NSObjects.GetEnumerator() | sort-object -Property Name
|
|
|
+
|
|
|
+write-host "`nBuilding Config...`n
|
|
|
+"
|
|
|
+if ($outputFile -and ($outputFile -ne "screen")) {
|
|
|
+ "# Extracted Config for: " + ($vservers -join ", ") + "`n`n" | out-file $outputFile
|
|
|
+} else {
|
|
|
+ "# Extracted Config for: " + ($vservers -join ", ") + "`n`n"
|
|
|
+}
|
|
|
+
|
|
|
+
|
|
|
+# System Settings
|
|
|
+if ($NSObjects."ns config" ) { outputObjectConfig "NSIP" "ns config" "raw"}
|
|
|
+if ($NSObjects."ns hostName" ) { outputObjectConfig "Hostname" "ns hostName" "raw"}
|
|
|
+if ($NSObjects."ha node" ) { outputObjectConfig "High Availability Nodes" "HA node" "raw"}
|
|
|
+if ($NSObjects."ha rpcNode" ) { outputObjectConfig "High Availability RPC Nodes" "ha rpcNode" "ns rpcNode"}
|
|
|
+if ($NSObjects."ns feature" ) { outputObjectConfig "Enabled Features" "ns feature" "raw"}
|
|
|
+if ($NSObjects."ns mode" ) { outputObjectConfig "Enabled Modes" "ns mode" "raw"}
|
|
|
+if ($NSObjects."system parameter" ) { outputObjectConfig "CEIP" "system parameter" "raw"}
|
|
|
+if ($NSObjects."ns encryptionParams" ) { outputObjectConfig "System Encryption Parameters" "ns encryptionParams" "raw"}
|
|
|
+if ($NSObjects."system user" ) { outputObjectConfig "System Users" "system user"}
|
|
|
+if ($NSObjects."system group" ) { outputObjectConfig "System Groups" "system group"}
|
|
|
+if ($NSObjects."interface" ) { outputObjectConfig "Interfaces" "interface" "raw"}
|
|
|
+if ($NSObjects."channel" ) { outputObjectConfig "Channels" "channel" "raw"}
|
|
|
+if ($NSObjects."ns ip" ) { outputObjectConfig "IP Addresses" "ns ip"}
|
|
|
+if ($NSObjects."vlan" ) { outputObjectConfig "VLANs" "vlan"}
|
|
|
+if ($NSObjects."vrid" ) { outputObjectConfig "VMACs" "vrid"}
|
|
|
+if ($NSObjects."ns partition" ) { outputObjectConfig "Partitions" "ns partition" -explainText "Partition configs are in /nsconfig/partitions" }
|
|
|
+if ($NSObjects."ns pbr" ) { outputObjectConfig "Policy Based Routes (PBRs)" "ns pbr" "raw"}
|
|
|
+if ($NSObjects."route" ) { outputObjectConfig "Routes" "route" "raw"}
|
|
|
+if ($NSObjects."mgmt ssl service" ) { outputObjectConfig "Internal Management Services SSL Settings" "mgmt ssl service" "ssl service"}
|
|
|
+if ($NSObjects."snmp trap" ) { outputObjectConfig "SNMP Traps" "snmp trap" "raw"}
|
|
|
+if ($NSObjects."snmp community" ) { outputObjectConfig "SNMP Communities" "snmp community" "raw"}
|
|
|
+if ($NSObjects."snmp manager" ) { outputObjectConfig "SNMP Managers" "snmp manager" "raw"}
|
|
|
+if ($NSObjects."snmp alarm" ) { outputObjectConfig "SNMP Alarms" "snmp alarm" "raw"}
|
|
|
+
|
|
|
+
|
|
|
+# Policy Expression Components and Profiles Output
|
|
|
+if ($NSObjects."ns acl" ) { outputObjectConfig "Global ACLs" "ns acl" "raw" }
|
|
|
+if ($NSObjects."rnat" ) { outputObjectConfig "Global RNAT" "rnat" }
|
|
|
+if ($NSObjects."ns variable" ) { outputObjectConfig "Variables" "ns variable" }
|
|
|
+if ($NSObjects."ns assignment" ) { outputObjectConfig "Variable Assignments" "ns assignment" }
|
|
|
+if ($NSObjects."ns limitSelector" ) { outputObjectConfig "Rate Limiting Selectors" "ns limitSelector" }
|
|
|
+if ($NSObjects."ns limitIdentifier" ) { outputObjectConfig "Rate Limiting Identifiers" "ns limitIdentifier" }
|
|
|
+if ($NSObjects."stream selector" ) { outputObjectConfig "Action Analytics Selectors" "stream selector" }
|
|
|
+if ($NSObjects."stream identifier" ) { outputObjectConfig "Action Analytics Identifiers" "stream identifier" }
|
|
|
+if ($NSObjects."policy param" ) { outputObjectConfig "Policy Global Params" "policy param" "raw" }
|
|
|
+if ($NSObjects."policy patset" ) { outputObjectConfig "Policy Pattern Sets" "policy patset" }
|
|
|
+if ($NSObjects."policy dataset" ) { outputObjectConfig "Policy Data Sets" "policy dataset" }
|
|
|
+if ($NSObjects."policy map" ) { outputObjectConfig "Policy Maps" "policy map" }
|
|
|
+if ($NSObjects."policy stringmap" ) { outputObjectConfig "Policy String Maps" "policy stringmap" }
|
|
|
+if ($NSObjects."policy urlset" ) { outputObjectConfig "Policy URL Sets" "policy urlset" }
|
|
|
+if ($NSObjects."policy httpCallout" ) { outputObjectConfig "HTTP Callouts" "policy httpCallout" }
|
|
|
+if ($NSObjects."policy expression" ) { outputObjectConfig "Policy Expressions" "policy expression" }
|
|
|
+if ($NSObjects."dns addRec" ) { outputObjectConfig "DNS Address Records" "dns addRec" }
|
|
|
+if ($NSObjects."dns nsRec" ) { outputObjectConfig "DNS Name Server Records" "dns nsRec"}
|
|
|
+if ($NSObjects."dns cnameRec" ) { outputObjectConfig "DNS CNAME Records" "dns cnameRec"}
|
|
|
+if ($NSObjects."dns soaRec" ) { outputObjectConfig "DNS SOA Records" "dns soaRec"}
|
|
|
+if ($NSObjects."ns tcpProfile" ) { outputObjectConfig "TCP Profiles" "ns tcpProfile" }
|
|
|
+if ($NSObjects."ns httpProfile" ) { outputObjectConfig "HTTP Profiles" "ns httpProfile" }
|
|
|
+if ($NSObjects."db dbProfile" ) { outputObjectConfig "Database Profiles" "db dbProfile" }
|
|
|
+if ($NSObjects."netProfile" ) { outputObjectConfig "Net Profiles" "netProfile" }
|
|
|
+if ($NSObjects."ns trafficDomain" ) { outputObjectConfig "Traffic Domains" "ns trafficDomain" }
|
|
|
+if ($NSObjects."ipset" ) { outputObjectConfig "IP Sets" "ipset" }
|
|
|
+if ($NSObjects."analytics profile" ) { outputObjectConfig "Analytics Profiles" "analytics profile" }
|
|
|
+if ($NSObjects."audit messageaction" ) { outputObjectConfig "Log Messages" "audit messageaction" }
|
|
|
+
|
|
|
+
|
|
|
+# Policies Output
|
|
|
+if ($NSObjects."appflow param" ) { outputObjectConfig "Appflow Global Params" "appflow param" "raw" }
|
|
|
+if ($NSObjects."appflow collector" ) { outputObjectConfig "Appflow Collectors" "appflow collector" }
|
|
|
+if ($NSObjects."appflow action" ) { outputObjectConfig "Appflow Actions" "appflow action" }
|
|
|
+if ($NSObjects."appflow policy" ) { outputObjectConfig "Appflow Policies" "appflow policy" }
|
|
|
+if ($NSObjects."appflow policylabel" ) { outputObjectConfig "Appflow Policy Labels" "appflow policylabel" }
|
|
|
+if ($NSObjects."appflow global" ) { outputObjectConfig "Appflow Global Bindings" "appflow global" "raw" }
|
|
|
+
|
|
|
+if ($NSObjects."rewrite param" ) { outputObjectConfig "Rewrite Global Parameters" "rewrite param" "raw" }
|
|
|
+if ($NSObjects."rewrite action" ) { outputObjectConfig "Rewrite Actions" "rewrite action" }
|
|
|
+if ($NSObjects."rewrite policy" ) { outputObjectConfig "Rewrite Policies" "rewrite policy" }
|
|
|
+if ($NSObjects."rewrite policylabel" ) { outputObjectConfig "Rewrite Policy Labels" "rewrite policylabel" }
|
|
|
+if ($NSObjects."rewrite global" ) { outputObjectConfig "Rewrite Global Bindings" "rewrite global" "raw" }
|
|
|
+
|
|
|
+if ($NSObjects."responder param" ) { outputObjectConfig "Responder Global Parameters" "responder param" "raw" }
|
|
|
+if ($NSObjects."responder action" ) { outputObjectConfig "Responder Actions" "responder action" }
|
|
|
+if ($NSObjects."responder policy" ) { outputObjectConfig "Responder Policies" "responder policy" }
|
|
|
+if ($NSObjects."responder policylabel" ) { outputObjectConfig "Responder Policy Labels" "responder policylabel" }
|
|
|
+if ($NSObjects."responder global" ) { outputObjectConfig "Responder Global Bindings" "responder global" "raw" }
|
|
|
+
|
|
|
+if ($NSObjects."appqoe parameter" ) { outputObjectConfig "AppQoE Global Parameters" "appqoe parameter" "raw"}
|
|
|
+if ($NSObjects."appqoe action" ) { outputObjectConfig "AppQoE Actions" "appqoe action" }
|
|
|
+if ($NSObjects."appqoe policy" ) { outputObjectConfig "AppQoE Policies" "appqoe policy" }
|
|
|
+
|
|
|
+if ($NSObjects."feo parameter" ) { outputObjectConfig "Front-End Optimization Global Parameters" "feo parameter" "raw"}
|
|
|
+if ($NSObjects."feo action" ) { outputObjectConfig "Front-End Optimization Actions" "feo action" }
|
|
|
+if ($NSObjects."feo policy" ) { outputObjectConfig "Front-End Optimization Policies" "feo policy" }
|
|
|
+if ($NSObjects."feo global" ) { outputObjectConfig "Front-End Optimization Global Bindings" "feo global" }
|
|
|
+
|
|
|
+if ($NSObjects."cache parameter" ) { outputObjectConfig "Cache Global Parameters" "cache parameter" "raw" }
|
|
|
+if ($NSObjects."cache selector" ) { outputObjectConfig "Cache Selectors" "cache selector" }
|
|
|
+if ($NSObjects."cache contentGroup" ) { outputObjectConfig "Cache Content Groups" "cache contentGroup" }
|
|
|
+if ($NSObjects."cache policy" ) { outputObjectConfig "Cache Policies" "cache policy" }
|
|
|
+if ($NSObjects."cache policylabel" ) { outputObjectConfig "Cache Policy Labels" "cache policylabel" }
|
|
|
+if ($NSObjects."cache global" ) { outputObjectConfig "Cache Global Bindings" "cache global" "raw" }
|
|
|
+
|
|
|
+if ($NSObjects."cmp parameter" ) { outputObjectConfig "Compression Global Parameters" "cmp parameter" "raw" }
|
|
|
+if ($NSObjects."cmp policy" ) { outputObjectConfig "Compression Policies" "cmp policy" }
|
|
|
+if ($NSObjects."cmp policylabel" ) { outputObjectConfig "Compression Policy Labels" "cmp policylabel" }
|
|
|
+if ($NSObjects."cmp global" ) { outputObjectConfig "Compression Global Bindings" "cmp global" "raw" }
|
|
|
+
|
|
|
+if ($NSObjects."appfw parameter" ) { outputObjectConfig "AppFW Global Settings" "appfw parameter" "raw" }
|
|
|
+if ($NSObjects."appfw profile" ) { outputObjectConfig "AppFW Profiles" "appfw profile" `
|
|
|
+ -explainText ("Some portions of AppFw Profile are not in the config file.`nManually export/import Signatures Object" + `
|
|
|
+ "`nManually export/import the AppFW Import Objects (e.g. HTML Error, XML Schema)") }
|
|
|
+if ($NSObjects."appfw policy" ) { outputObjectConfig "AppFW Policies" "appfw policy" }
|
|
|
+if ($NSObjects."appfw policylabel" ) { outputObjectConfig "AppFW Policy Labels" "appfw policylabel" }
|
|
|
+if ($NSObjects."appfw global" ) { outputObjectConfig "AppFW Global Bindings" "appfw global" "raw" }
|
|
|
+
|
|
|
+if ($NSObjects."bot parameter" ) { outputObjectConfig "Bot Management Global Settings" "bot parameter" "raw" }
|
|
|
+if ($NSObjects."bot profile" ) { outputObjectConfig "Bot Management Profiles" "bot profile" `
|
|
|
+ -explainText ("Some portions of Bot Profiles are not in the config file.`nManually export/import Signatures Object") }
|
|
|
+if ($NSObjects."bot policy" ) { outputObjectConfig "Bot Management Policies" "bot policy" }
|
|
|
+if ($NSObjects."bot policylabel" ) { outputObjectConfig "Bot Management Policy Labels" "bot policylabel" }
|
|
|
+if ($NSObjects."bot global" ) { outputObjectConfig "Bot Management Global Bindings" "bot global" "raw" }
|
|
|
+
|
|
|
+if ($NSObjects."transform profile" ) { outputObjectConfig "Transform Profiles" "transform profile" }
|
|
|
+if ($NSObjects."transform action" ) { outputObjectConfig "Transform Actions" "transform action" }
|
|
|
+if ($NSObjects."transform policy" ) { outputObjectConfig "Transform Policies" "transform policy" }
|
|
|
+if ($NSObjects."transform policylabel" ) { outputObjectConfig "Transform Policy Labels" "transform policylabel" }
|
|
|
+if ($NSObjects."transform global" ) { outputObjectConfig "Transform Global Bindings" "transform global" "raw" }
|
|
|
+
|
|
|
+if ($NSObjects."filter action" ) { outputObjectConfig "Filter Actions" "filter action" }
|
|
|
+if ($NSObjects."filter policy" ) { outputObjectConfig "Filter Policies" "filter policy" }
|
|
|
+if ($NSObjects."filter global" ) { outputObjectConfig "Filter Global Bindings" "filter global" "raw" }
|
|
|
+
|
|
|
+if ($NSObjects."audit syslogaction" ) { outputObjectConfig "Audit Syslog Actions" "audit syslogaction" }
|
|
|
+if ($NSObjects."audit syslogpolicy" ) { outputObjectConfig "Audit Syslog Policies" "audit syslogpolicy" }
|
|
|
+
|
|
|
+if ($NSObjects."audit nslogaction" ) { outputObjectConfig "Audit NSLog Actions" "audit nslogaction" }
|
|
|
+if ($NSObjects."audit nslogpolicy" ) { outputObjectConfig "Audit NSLog Policies" "audit nslogpolicy" }
|
|
|
+
|
|
|
+if ($NSObjects."audit syslogactionglobal" ) { outputObjectConfig "Global Audit Syslog Bindings" "audit syslogactionglobal" "raw" }
|
|
|
+
|
|
|
+
|
|
|
+# SSL Output
|
|
|
+if ($NSObjects."ssl parameter" ) { outputObjectConfig "SSL Global Parameters" "ssl parameter" "raw" }
|
|
|
+if ($NSObjects."ssl cipher" ) { outputObjectConfig "SSL Cipher Groups" "ssl cipher" }
|
|
|
+if ($NSObjects."ssl fipsKey" ) { outputObjectConfig "SSL FIPS Keys" "ssl fipsKey" }
|
|
|
+if ($NSObjects."ssl cert" ) { outputObjectConfig "Certs" "ssl cert" "raw" `
|
|
|
+ -explainText "Get certificate files from /nsconfig/ssl" }
|
|
|
+if ($NSObjects."ssl link" ) { outputObjectConfig "Cert Links" "ssl link" "raw" }
|
|
|
+if ($NSObjects."ssl profile" ) { outputObjectConfig "SSL Profiles" "ssl profile" }
|
|
|
+if ($NSObjects."ssl logprofile" ) { outputObjectConfig "SSL Log Profiles" "ssl logprofile" }
|
|
|
+if ($NSObjects."ssl action" ) { outputObjectConfig "SSL Actions" "ssl action" }
|
|
|
+if ($NSObjects."ssl policy" ) { outputObjectConfig "SSL Policies" "ssl policy" }
|
|
|
+
|
|
|
+
|
|
|
+# AAA Output
|
|
|
+if ($NSObjects."vpn portaltheme" ) { outputObjectConfig "Portal Themes" "vpn portaltheme" `
|
|
|
+ -explainText "Portal Theme customizations are not in the NetScaler config file and instead are stored in /var/netscaler/logon/themes/{ThemeName}" }
|
|
|
+if ($NSObjects."authentication param" ) { outputObjectConfig "AAA Global Settings" "authentication param" "raw" }
|
|
|
+if ($NSObjects."authorization policy" ) { outputObjectConfig "Authorization Policies" "authorization policy" }
|
|
|
+if ($NSObjects."authorization policylabel" ) { outputObjectConfig "Authorization Policies" "authorization policylabel" }
|
|
|
+if ($NSObjects."authentication pushService" ) { outputObjectConfig "OTP Push Service" "authentication pushService" }
|
|
|
+if ($NSObjects."aaa kcdAccount" ) { outputObjectConfig "KCD Accounts" "aaa kcdAccount" }
|
|
|
+if ($NSObjects."authentication ldapAction" ) { outputObjectConfig "LDAP Actions" "authentication ldapAction" `
|
|
|
+ -explainText "LDAP certificate verification Root certificates are in /nsconfig/truststore" }
|
|
|
+if ($NSObjects."authentication ldapPolicy" ) { outputObjectConfig "LDAP Policies" "authentication ldapPolicy" }
|
|
|
+if ($NSObjects."authentication radiusAction" ) { outputObjectConfig "RADIUS Actions" "authentication radiusAction" }
|
|
|
+if ($NSObjects."authentication radiusPolicy" ) { outputObjectConfig "RADIUS Policies" "authentication radiusPolicy" }
|
|
|
+if ($NSObjects."authentication OAuthAction" ) { outputObjectConfig "OAuth Actions" "authentication OAuthAction" }
|
|
|
+if ($NSObjects."authentication samlAction" ) { outputObjectConfig "SAML Actions" "authentication samlAction" }
|
|
|
+if ($NSObjects."authentication samlIdPProfile" ) { outputObjectConfig "SAML IdP Profiles" "authentication samlIdPProfile" }
|
|
|
+if ($NSObjects."authentication certAction" ) { outputObjectConfig "Cert Actions" "authentication certAction" }
|
|
|
+if ($NSObjects."authentication dfaAction" ) { outputObjectConfig "Delegaged Forms Authentication Actions" "authentication dfaAction" }
|
|
|
+if ($NSObjects."authentication epaAction" ) { outputObjectConfig "Endpoint Analysis Actions" "authentication epaAction" }
|
|
|
+if ($NSObjects."authentication negotiateAction" ) { outputObjectConfig "Negotiate (Kerberos) Actions" "authentication negotiateAction" }
|
|
|
+if ($NSObjects."authentication storefrontAuthAction" ) { outputObjectConfig "StorefrontAuth Actions" "authentication storefrontAuthAction" }
|
|
|
+if ($NSObjects."authentication tacacsAction" ) { outputObjectConfig "TACACS Actions" "authentication tacacsAction" }
|
|
|
+if ($NSObjects."authentication tacacsPolicy" ) { outputObjectConfig "TACACS Policies" "authentication tacacsPolicy" }
|
|
|
+if ($NSObjects."authentication localPolicy" ) { outputObjectConfig "Local Authentication Policies" "authentication localPolicy" }
|
|
|
+if ($NSObjects."authentication webAuthAction" ) { outputObjectConfig "Web Auth Actions" "authentication webAuthAction" }
|
|
|
+if ($NSObjects."authentication emailAction" ) { outputObjectConfig "Email (SSPR) Actions" "authentication emailAction" }
|
|
|
+if ($NSObjects."authentication noAuthAction" ) { outputObjectConfig "NoAuth Actions" "authentication noAuthAction" }
|
|
|
+if ($NSObjects."authentication captchaAction" ) { outputObjectConfig "Captcha Actions" "authentication captchaAction" }
|
|
|
+if ($NSObjects."authentication adfsProxyProfile" ) { outputObjectConfig "ADFS Proxy Profile" "authentication adfsProxyProfile" }
|
|
|
+if ($NSObjects."authentication samlPolicy" ) { outputObjectConfig "SAML Authentication Policies" "authentication samlPolicy" }
|
|
|
+if ($NSObjects."authentication policy" ) { outputObjectConfig "Advanced Authentication Policies" "authentication policy" }
|
|
|
+if ($NSObjects."authentication loginSchema" ) { outputObjectConfig "Login Schemas" "authentication loginSchema" }
|
|
|
+if ($NSObjects."authentication loginSchemaPolicy" ) { outputObjectConfig "Login Schema Policies" "authentication loginSchemaPolicy" }
|
|
|
+if ($NSObjects."authentication policylabel" ) { outputObjectConfig "Authentication Policy Labels" "authentication policylabel" }
|
|
|
+if ($NSObjects."tm sessionAction" ) { outputObjectConfig "AAA Session Profiles" "tm sessionAction" }
|
|
|
+if ($NSObjects."tm sessionPolicy" ) { outputObjectConfig "AAA Session Policies" "tm sessionPolicy" }
|
|
|
+if ($NSObjects."authentication vserver" ) { outputObjectConfig "Authentication Virtual Servers" "authentication vserver" }
|
|
|
+if ($NSObjects."authentication authnProfile" ) { outputObjectConfig "Authentication Profiles" "authentication authnProfile" }
|
|
|
+if ($NSObjects."tm formSSOAction" ) { outputObjectConfig "AAA Form SSO Profiles" "tm formSSOAction" }
|
|
|
+if ($NSObjects."tm samlSSOProfile" ) { outputObjectConfig "AAA SAML SSO Profiles" "tm samlSSOProfile" }
|
|
|
+if ($NSObjects."tm trafficAction" ) { outputObjectConfig "AAA Traffic Profiles" "tm trafficAction" }
|
|
|
+if ($NSObjects."tm trafficPolicy" ) { outputObjectConfig "AAA Traffic Policies" "tm trafficPolicy" }
|
|
|
+if ($NSObjects."tm global" ) { outputObjectConfig "AAA Global Bindings" "tm global" "raw" }
|
|
|
+
|
|
|
+# Load Balancing output
|
|
|
+if ($NSObjects."lb parameter" ) { outputObjectConfig "Load Balancing Global Parameters" "lb parameter" "raw" }
|
|
|
+if ($NSObjects."lb metricTable" ) { outputObjectConfig "Metric Tables" "lb metricTable" }
|
|
|
+if ($NSObjects."lb profile" ) { outputObjectConfig "Load Balancing Profiles" "lb profile" }
|
|
|
+if ($NSObjects."monitor" ) { outputObjectConfig "Monitors" "monitor" }
|
|
|
+if ($NSObjects."server" ) { outputObjectConfig "Servers" "server" }
|
|
|
+if ($NSObjects."service" ) { outputObjectConfig "Services" "service" }
|
|
|
+if ($NSObjects."serviceGroup" ) { outputObjectConfig "Service Groups" "serviceGroup" }
|
|
|
+if ($NSObjects."lb vserver" ) { outputObjectConfig "Load Balancing Virtual Servers" "lb vserver" }
|
|
|
+if ($NSObjects."lb group" ) { outputObjectConfig "Persistency Group" "lb group" }
|
|
|
+
|
|
|
+
|
|
|
+# Content Switching Output
|
|
|
+if ($NSObjects."cs parameter" ) { outputObjectConfig "Content Switching Parameters" "cs parameter" "raw" }
|
|
|
+if ($NSObjects."cs action" ) { outputObjectConfig "Content Switching Actions" "cs action" }
|
|
|
+if ($NSObjects."cs policy" ) { outputObjectConfig "Content Switching Policies" "cs policy" }
|
|
|
+if ($NSObjects."cs policylabel" ) { outputObjectConfig "Content Switching Policy Labels" "cs policylabel" }
|
|
|
+
|
|
|
+
|
|
|
+# Citrix Gateway Output
|
|
|
+if ($NSObjects."vpn intranetApplication" ) { outputObjectConfig "Citrix Gateway Intranet Applications" "vpn intranetApplication" }
|
|
|
+if ($NSObjects."aaa preauthenticationaction" ) { outputObjectConfig "Preauthentication Profiles" "aaa preauthenticationaction" }
|
|
|
+if ($NSObjects."aaa preauthenticationpolicy" ) { outputObjectConfig "Preauthentication Policies" "aaa preauthenticationpolicy" }
|
|
|
+if ($NSObjects."vpn eula" ) { outputObjectConfig "Citrix Gateway EULA" "vpn eula" }
|
|
|
+if ($NSObjects."vpn clientlessAccessProfile" ) { outputObjectConfig "Citrix Gateway Clientless Access Profiles" "vpn clientlessAccessProfile" }
|
|
|
+if ($NSObjects."vpn clientlessAccessPolicy" ) { outputObjectConfig "Citrix Gateway Clientless Access Policies" "vpn clientlessAccessPolicy" }
|
|
|
+if ($NSObjects."rdp clientprofile" ) { outputObjectConfig "Citrix Gateway RDP Profiles" "rdp clientprofile" }
|
|
|
+if ($NSObjects."vpn pcoipProfile" ) { outputObjectConfig "Citrix Gateway PCoIP Profiles" "vpn pcoipProfile" }
|
|
|
+if ($NSObjects."vpn pcoipVserverProfile" ) { outputObjectConfig "Citrix Gateway VServer PCoIP Profiles" "vpn pcoipVserverProfile" }
|
|
|
+if ($NSObjects."vpn formSSOAction" ) { outputObjectConfig "Citrix Gateway Form SSO Profiles" "vpn formSSOAction" }
|
|
|
+if ($NSObjects."vpn samlSSOProfile" ) { outputObjectConfig "Citrix Gateway SAML SSO Profiles" "vpn samlSSOProfile" }
|
|
|
+if ($NSObjects."vpn trafficAction" ) { outputObjectConfig "Citrix Gateway Traffic Profiles" "vpn trafficAction" }
|
|
|
+if ($NSObjects."vpn trafficPolicy" ) { outputObjectConfig "Citrix Gateway Traffic Policies" "vpn trafficPolicy" }
|
|
|
+if ($NSObjects."vpn alwaysONProfile" ) { outputObjectConfig "Citrix Gateway AlwaysON Profiles" "vpn alwaysONProfile" }
|
|
|
+if ($NSObjects."vpn sessionAction" ) { outputObjectConfig "Citrix Gateway Session Profiles" "vpn sessionAction" }
|
|
|
+if ($NSObjects."vpn sessionPolicy" ) { outputObjectConfig "Citrix Gateway Session Policies" "vpn sessionPolicy" }
|
|
|
+if ($NSObjects."ica accessprofile" ) { outputObjectConfig "Citrix Gateway SmartControl Access Profiles" "ica accessprofile" }
|
|
|
+if ($NSObjects."ica action" ) { outputObjectConfig "Citrix Gateway SmartControl Actions" "ica action" }
|
|
|
+if ($NSObjects."ica policy" ) { outputObjectConfig "Citrix Gateway SmartControl Policies" "ica policy" }
|
|
|
+if ($NSObjects."vpn url" ) { outputObjectConfig "Citrix Gateway Bookmarks" "vpn url" }
|
|
|
+if ($NSObjects."vpn parameter" ) { outputObjectConfig "Citrix Gateway Global Settings" "vpn parameter" "raw" }
|
|
|
+if ($NSObjects."clientless domains" ) { outputObjectConfig "Citrix Gateway Clientless Domains" "clientless domains" "raw" }
|
|
|
+if ($NSObjects."vpn nextHopServer" ) { outputObjectConfig "Citrix Gateway Next Hop Servers" "vpn nextHopServer" }
|
|
|
+if ($NSObjects."vpn vserver" ) { outputObjectConfig "Citrix Gateway Virtual Servers" "vpn vserver" }
|
|
|
+if ($NSObjects."vpn global" ) { outputObjectConfig "Citrix Gateway Global Bindings" "vpn global" "raw" }
|
|
|
+if ($NSObjects."aaa group" ) { outputObjectConfig "AAA Groups" "aaa group" }
|
|
|
+
|
|
|
+
|
|
|
+# GSLB Output
|
|
|
+if ($NSObjects."adns service" ) { outputObjectConfig "ADNS Services" "adns service" "raw" }
|
|
|
+if ($NSObjects."gslb site" ) { outputObjectConfig "GSLB Sites" "gslb site" }
|
|
|
+if ($NSObjects."ns rpcNode" ) { outputObjectConfig "GSLB RPC Nodes" "ns rpcNode" }
|
|
|
+if ($NSObjects."dns view" ) { outputObjectConfig "DNS Views" "dns view" }
|
|
|
+if ($NSObjects."dns action" ) { outputObjectConfig "DNS Actions" "dns action" }
|
|
|
+if ($NSObjects."dns policy" ) { outputObjectConfig "DNS Policies" "dns policy" }
|
|
|
+if ($NSObjects."dns global" ) { outputObjectConfig "DNS Global Bindings" "dns global" "raw"}
|
|
|
+if ($NSObjects."gslb location" ) { outputObjectConfig "GSLB Locations (Static Proximity)" "gslb location" "raw" }
|
|
|
+if ($NSObjects."gslb parameter" ) { outputObjectConfig "GSLB Parameters" "gslb parameter" "raw" }
|
|
|
+if ($NSObjects."gslb service" ) { outputObjectConfig "GSLB Services" "gslb service" }
|
|
|
+if ($NSObjects."gslb vserver" ) { outputObjectConfig "GSLB Virtual Servers" "gslb vserver" }
|
|
|
+
|
|
|
+if ($NSObjects."cr policy" ) { outputObjectConfig "Cache Redirection Policies" "cr policy" }
|
|
|
+if ($NSObjects."cr vserver" ) { outputObjectConfig "Cache Redirection Virtual Servers" "cr vserver" }
|
|
|
+
|
|
|
+if ($NSObjects."cs vserver" ) { outputObjectConfig "Content Switching Virtual Servers" "cs vserver" }
|
|
|
+
|
|
|
+if ($NSObjects."ssl vserver" ) { outputObjectConfig "SSL Virtual Servers" "ssl vserver" }
|
|
|
+
|
|
|
+# Global System Bindings - can't bind until objects are created
|
|
|
+if ($NSObjects."system global" ) { outputObjectConfig "System Global Bindings" "system global" "raw"}
|
|
|
+if ($NSObjects."dns nameServer" ) { outputObjectConfig "DNS Name Servers" "dns nameServer" }
|
|
|
+
|
|
|
+
|
|
|
+if ($outputFile -and ($outputFile -ne "screen")) {
|
|
|
+ # Convert file EOLs to UNIX format so file can be batch imported to NetScaler
|
|
|
+ $text = [IO.File]::ReadAllText($outputFile) -replace "`r`n", "`n"
|
|
|
+ [IO.File]::WriteAllText($outputFile, $text)
|
|
|
+}
|
|
|
+
|
|
|
+if ($textEditor -and ($outputFile -and ($outputFile -ne "screen"))) {
|
|
|
+
|
|
|
+ # Open Text Editor
|
|
|
+
|
|
|
+ #if (Test-Path $textEditor -PathType Leaf){
|
|
|
+
|
|
|
+ write-host "`nOpening Output file `"$outputFile`" using `"$textEditor`" ..."
|
|
|
+
|
|
|
+ start-process -FilePath $textEditor -ArgumentList "`"$outputFile`""
|
|
|
+
|
|
|
+ <#} else {
|
|
|
+ write-host "`nText Editor not found: `"$textEditor`""
|
|
|
+ write-host "`nCan't open output file: `"$outputFile`""
|
|
|
+ }#>
|
|
|
+
|
|
|
+}
|
Parv Ashwani
5 meses atrás