Product Documentation

Configuring a Data Set

Feb 13, 2017

To configure a data set, you must specify the strings that are to serve as patterns, and assign a type (number, IPv4 address, or IPv6 address) to each pattern. You can manually assign a unique index value to each of these patterns, or you can allow the index values to be assigned automatically.  Dataset is not related to HTTP or any 7 layer protocol. It works only on text/string. There are different types of dataset such as num, ulong, ipv4, and ipv6. To use a dataset on IP, we have to convert the input into text/string.

Note: Data sets are case sensitive (unless you specify the expression to ignore case). Therefore, the string pattern "product1," for example, is not the same as the string pattern "Product1."

The rules applied for index values of data sets are the same as those applied for pattern sets. For information about index values, see "Configuring a Pattern Set."

To configure a data set by using the command line interface

At the command prompt, do the following:

  1. Create a data set.

    add policy dataset <name> <type>

    > add policy dataset sampledataset ipv4
  2. Bind patterns to the data set.

    bind policy dataset <name> <value> [-index <positive_integer>]

    > bind policy dataset sampledataset -index 1
    Note: Repeat this step for all the patterns you want to bind to the data set.
  3. add policy expression sampleexpression client.ip.src.typecast_text_t.equals_any("sampledataset")
  4. Verify the configuration.

    show policy dataset <name>

To configure a data set by using the configuration utility

Navigate to AppExpert > Data Sets, click Add and specify the relevant details.