Click the Allow check box for Oracle Web Cache to allow requests matching Click the Monitor Only check box to see the match activity of the rule without Configuring Rules for the Header Request Filter

Configuring Request Filtering 4-13 - Regular Expression: Enter the regular expression of the objects. Remember to use to denote the start of the URL and to denote the end of the URL.

g. From the URL Type list, select an option to determine how the rules URL is

compared to the requests URL: - Path Prefix: Select to allow or deny access to requests matching a path prefix. - File Extension: Select to allow or deny access to requests matching a particular file extension. - Regular Expression: Select to allow or deny access to requests matching regular expression syntax.

h. Click the Case Insensitive Match check box to match requests regardless of

the case. If you do not select this check box, the rule bases the match on the case.

i. Click the Match If Found check box for Oracle Web Cache to match incoming

requests in which the header value matches the substring or regular expression specified in the Value Expression field. If there is a match with a request and the rule is enabled, the filter denies the request. Do not select the Match If Found check box for Oracle Web Cache to match incoming requests in which the header value does not match the substring or regular expression specified in the Value Expression field. Oracle Web Cache denies the request only if the string or expression is not found, meaning that the request is allowed if the string is found. Create a rule with the Match If Found check box selected, followed by rules without the check box selected.

j. Click the Monitor Only check box to see the match activity of the rule without

enforcing the rule. When results are expected, then disable Monitor Only to enforce the rule. See Section 4.4 for further information about the Monitor Only option.

k. Click Apply to save the rule settings.

8. Perform Step 7 for any additional rules.

9. Use the Move Up and Move Down icons to change the order in which the rules

are matched against requests. The order of the rules is important. Oracle Web Cache matches higher priority rules first.

10. Click the Request Filters Summary breadcrumb at the top of the page, or from the

Web Cache menu, select Administration and then Request Filters to navigate back to the Request Filters Summary page.

11. In the Header row, click Enable to enable the filter.

If you do not click Enable, Oracle Web Cache ignores any configured filter rules for this filter.

12. Click Apply to save the configuration for the request filter.

4.10 Configuring Rules for the Query String Request Filter

The query string request filter enables Oracle Web Cache to deny access based on query string parameter values. 4-14 Oracle Fusion Middleware Administrators Guide for Oracle Web Cache See Section 4.2 for further information about the query-string request filter. To configure rules for the query string request filter: 1. Navigate to the Web Cache Home page in Fusion Middleware Control. See Section 2.6.2 .

2. From the Web Cache menu, select Administration and then Request Filters.

The Request Filters Summary page displays.

3. From the Site list, select the site to apply the filter. See

Section 2.11.3 and Section 2.11.4 to create additional sites. You can configure filters and filter rules for specific sites or Undefined Sites. Oracle Web Cache directs client requests that do not match a defined site to the request filters configured for Undefined Sites.

4. Click the Query String link.

The Query String Request Filter page displays.

5. From the Audit list, select the level of action for Oracle Web Cache to include in its

audit log for the request filter.

6. From the Response to deny list, select the HTTP response for Oracle Web Cache to

return to browsers for requests that are denied by this request filter. The Close Connection option does not return any HTTP responses. It just closes the connection. 7. Create a new rule:

a. Click Create to create a row in the table.