eG Monitoring
 

Measures reported by CtxNsCachePLTest

A policy label consists of a set of policies, other policy labels, and virtual server-specific policy banks. The Web App Firewall evaluates each policy bound to the policy label in order of priority. If the policy matches, it filters the connection as specified in the associated profile. Then it does whatever the Goto parameter specifies, which can be to terminate policy evaluation, go to the next policy, or go to the policy with the specified priority. If the Invoke parameter is set, it terminates processing of the current policy label and begins to process the specified policy label or virtual server.

Periodically, administrators may want to know how many connections match each policy label that has been defined. This helps them to evaluate the effectiveness of the policies grouped under a label, and also to understand how well NetScaler secures connections to the Citrix environment. To achieve this, administrators can use the CtxNsCachePLTest.

This test auto-discovers the policy labels and reports the count of connections that match each policy label.

Outputs of the test: One set of results for each policy label configured on the Citrix ADC VPX/MPX appliance being monitored.

Descriptor: Policy Label

The measures made by this test are as follows:

Measurement Description Measurement Unit Interpretation
Hits Indicates the count of connections that match this policy label. Number

Compare the value of this measure across policy labels to know which policy label was applied to the maximum number of connections.

If this value is abnormally high for any label, you may want to review the policies grouped under this label to verify if they have been correctly configured.