Phone Lines icon GFI Support

Articles in this section

See more

Creating a Do Not Cache Policy

Author: Luis Fernandes Updated

Overview

This article provides instruction on the best way to create a "Do not cache" Policy. 

Unfortunately, the URL's in the "do not cache" list are not always able to be applied as rules in QOS (Quality of Service). As such, it is better if you can add the site as a network object (based on IP) and create an ignore policy or a policy that does not have cache enabled.

You can also create an application group consisting of individual custom applications to easily maintain the sites. Just by adding and removing the application from the group you created, you will automatically update all the policies in the optimizer (that use that particular group of uncached applications). Again, you can base the application on the IP or the layer 7 definitions (it is always best to use the IP as a definition if you have it/them).

Also, the new policy that you create, it doesn't matter what the bandwidth you guarantee, because the traffic will flow in, hit the Web traffic policy, then be reclassified as a "do not cache" (in the other policy), but it will still be given the amount of bandwidth in the original web policy to make it easier. This way you do not have to figure out exactly how much bandwidth you will need for that collection of internet sites you do not wish to cache.

 

Resolution

Here are the instructions of creating a policy based on ignoring, you can omit the ignore part if you like, which is probably best:
It is always best to add the site as a network object based on the IP. However, if you do not have the IP, you can add this as an application with an L7 definition.

  • If you have the IP:

    1.  Log in to the WebUI
    2. Go to objects/network
    3. Name it accordingly.
    4. Select Subnet Report if need be.
    5. Add the IP to the IP Network Address / Mask Length Field.
    6. Add it as a /32
    7. Click "Add New Network Object".

  • If you do not have the IP:

    1. Log in to the WebUI
    2. Go to objects/applications
    3. Select HTTP under the L7 Signature - if creating an application for an application group as suggested above, use the network object as a definition if you created based on the IP and you will not have to select HTTP or any of the other options.
    4. Select "host".
    5. Add the URL, for example, microsoft.com
    6. Click "Add New Application".

  • IF you want to create an application group:

    1. Go to objects/applications/application groups.
    2. Name the application group.
    3. Select the newly created application from the dropdown menu.
    4. "Add new application group" when finished.

  • From here you will just need to create the ignore policy:

    1. Log in to the WebUI
    2. Click on the optimizer.
    3. Under the Virtual Circuit that you want to add the policy to click "Create New Policy".
    4. Name the policy.
    5. Assign a VC policy number that is lower so that it is closer to the top of the list
      Under the "Action" field, select "Ignore" or "Block".
    6. Under either the source or the destination, select the network object and if you added the application, select the application (if you created an application group, select the application group).
    7. Click "Add New Policy".