Skip to content

Commit 09ab5b8

Browse files
Update content/includes/nap-waf/config/common/ip-groups-override-rules.md
Co-authored-by: Alan Dooley <[email protected]>
1 parent e78a5ba commit 09ab5b8

File tree

1 file changed

+6
-11
lines changed

1 file changed

+6
-11
lines changed

content/includes/nap-waf/config/common/ip-groups-override-rules.md

+6-11
Original file line numberDiff line numberDiff line change
@@ -57,18 +57,13 @@ The previous example policy contains an IP group with the name "standalone", use
5757
The condition means that the rule enforcement is applied when clientIp is matched to one of ipAddresses in ipAddressList with name "standalone".
5858
The value used for the override condition must exist and exactly match the name in "ip-address-lists".
5959

60-
#### Several error cases are verified:
61-
- Using another keyword instead of ipAddressLists;
62-
example: clientIp.matches(invalidList['standalone']);
63-
error_message: " Invalid field invalidList"
60+
#### Possible errors
6461

65-
- Using empty name;
66-
example: clientIp.matches(ipAddressLists['']);
67-
error_message: " Invalid value empty string"
68-
69-
- Using ipAddressLists with attribute otherwise then clientIp;
70-
example: uri.matches(ipAddressLists['standalone']);
71-
error_message: "Failed to compile policy - 'ipGroupOverridePolicy'"
62+
| Error text | Input | Explanation |
63+
| -----------| ------------- | ------------ |
64+
| _Invalid field invalidList_ | _clientIp.matches(invalidList['standalone']);_ | An incorrect keyword was used instead of _ipAddressLists_ |
65+
| _Invalid value empty string_ | _clientIp.matches(ipAddressLists['']_ | An empty name was provided |
66+
| _Failed to compile policy - 'ipGroupOverridePolicy'_ | _uri.matches(ipAddressLists['standalone']);_ | Used _ipAddressLists_ without the _clientIP_ attribute |
7267

7368

7469

0 commit comments

Comments
 (0)