SYSTEMS AND METHODS FOR CONFIGURATION DRIVEN REWRITE OF SSL VPN CLIENTLESS SESSIONS

摘要

The present disclosure provides solutions for an enterprise providing services to a variety of clients to enable the client to use the resources provided by the enterprise by modifying URLs received and the URLs from the responses from the servers to the client's requests before forwarding the requests and the responses to the intended destinations. An intermediary may identify an access profile for a clients' request to access a server via a clientless SSL VPN session. The intermediary may detect one or more URLs in content served by the server in response to the request using one or more regular expressions of the access profile. The intermediary may rewrite or modify, responsive to detecting, the one or more detected URLs in accordance with a URL transformation specified by one or more rewrite policies of the access profile. The response with modified URLs may be forwarded to the client.

主权项

1. A method for rewriting by an intermediary content transmitted between a client and a server, the method comprising:
a) identifying, by a device intermediary to a client and a server, an access profile for a request from the client to access content from the server based on applying a rule to content of the request, the access profile including a rewrite policy for rewriting uniform resource locators (URLs) and a plurality of pattern sets comprising regular expressions for finding the URLs to rewrite in different types of content transmitted by the server to the client; b) finding, by the device, a URL in content in a response of the server to the request by matching a regular expression of one of the plurality of pattern sets to a portion of the content; c) rewriting, by the device, in accordance with the rewrite policy the URL found in the content; and d) transmitting, by the device to the client, the response comprising the rewritten URL.