Configure and bind policies with the policy manager
Classic policy expressions are no longer supported from Citrix ADC 12.0 build 56.20 onwards and as an alternative, Citrix recommends you to use Advanced policies. For more information, see Advanced Policies.
Some applications provide a specialized Policy Manager in the Citrix ADC configuration utility to simplify configuring policy banks. It also lets you find and delete policies and actions that are not being used.
The Policy Manager is currently available for the Rewrite, Integrated Caching, Responder, and Compression features.
The following are keyboard equivalents for the procedures in this section:
- For editing a cell in the Policy Manager, you can tab to the cell and click F2 or press the SPACE bar on the keyboard.
- To select an entry in a drop-down menu, you can tab to the entry, press the space bar to view the drop-down menu, use the UP and DOWN ARROW keys to navigate to the entry that you want, and press the space bar again to select the entry.
- To cancel a selection in a drop-down menu, press the Escape key.
- To insert a policy, tab to the row above the insertion point and press Control + Insert, or click Insert Policy.
- To remove a policy, tab to the row that contains the policy and press Delete.
Note: Note that when you delete the policy, the Citrix ADC searches the Goto Expression values of other policies in the bank. If any of these Goto Expression values match the priority level of the deleted policy, they are removed.
Configure policy bindings by using the policy manager
In the navigation pane, click the feature for which you want to configure policies. The choices are Responder, Integrated Caching, Rewrite or Compression.
In the details pane, click Policy Manager.
If you are configuring classic policy bindings for compression, in the Compression Policy Manager dialog box, click Switch to Classic Syntax. The dialog box switches to the classic syntax view and displays the Switch to Advanced Policy button. At any time before you complete configuring policy bindings, if you want to configure bindings for policies that use the Advanced Policy click the Switch to Advanced Policy button.
For features other than Responder, to specify the bind point, click Request or Response, and then click one of the request-time or response-time bind points. The options are Override Global, LB Virtual Server, CS Virtual Server, Default Global, or Policy Label. If you are configuring the Responder, the Request and Response flow types are not available.
To bind a policy to this bind point, click Insert Policy, and select a previously configured policy, a NOPOLICY label, or the New policy option. Depending on the option that you select, you have the following choices:
- New policy: Create the policy as described in “Create or modify a policy,” and then configure the priority level, GoTo expression, and policy invocation as described in the table, “Format of each entry in a policy bank.”
- Existing policy, NOPOLICY, or NOPOLICY<feature name>: Configure the priority level, GoTo expression, and policy invocation as described in the table, “Format of each entry in a policy bank.” The NOPOLICY or NOPOLICY<feature name> options are available only for policies that use Advanced Policies.
Repeat the preceding steps to add entries to this policy bank.
To modify the priority level for an entry, you can do any of the following:
- Double-click the Priority field for an entry and edit the value.
- Click and drag a policy to another row in the table.
- Click Regenerate Priorities.
In all three cases, priority levels of all other policies are modified as needed to accommodate the new value. Goto Expressions with integer values are also updated automatically. For example, if you change a priority value of 10 to 100, all policies with a Goto Expression value of 10 are updated to the value 100.
To change the policy, action, or policy bank invocation for an row in the table, click the down arrow to the right of the entry and do one of the following:
- To change the policy, select another policy name or select New Policy and follow the steps in Create or modify a policy.
- To change the Goto Expression, select Next, End, USE_INVOCATION_RESULT, or select more and enter an expression whose result returns the priority level of another entry in this policy bank.
- To modify an invocation, select an existing policy bank, or click New Policy Label and follow the steps in Bind a policy to a policy label.
To unbind a policy or a policy label invocation from this bank, click any field in the row that contains the policy or policy label, and then click Unbind Policy.
When you are done, click Apply Changes. A message in the status bar indicates that the policy is bound successfully.
Remove unused policies by using the policy manager
- In the navigation pane, click the feature for which you want to configure the policy bank. The choices are Responder, Integrated Caching, or Rewrite.
- In the details pane, click
<Feature Name>policy manager.
- In the <Feature Name> Policy Manager dialog box, click Cleanup Configuration.
- In the Cleanup Configuration dialog box, select the items that you want to delete, and then click Remove.
- In the Remove dialog box, click Yes.
- Click Close. A message in the status bar indicates that the policy is removed successfully.