Which policy expression will allow all users access through the vServer in an AAA configuration?

Which policy expression will allow all users access through the vServer in an AAA configuration?

• A. true
• B. false
• C. ns_true
• D. ns_false

Answer: (C)

In this scenario, you want a policy expression that always allows access, regardless of who the user is. The built-in expression that guarantees a match every time is ns_true, which evaluates to true for every request. Using ns_true makes the vServer accessible to all users under the AAA policy because there’s no condition to fail the authorization check. By contrast, ns_false or false would always deny access, and while true might seem like it would work, the canonical, supported way in Citrix ADC policy language to express unconditional permit is ns_true. Keep in mind that an always-true policy should be used with caution in production environments due to security implications.

In this scenario, you want a policy expression that always allows access, regardless of who the user is. The built-in expression that guarantees a match every time is ns_true, which evaluates to true for every request. Using ns_true makes the vServer accessible to all users under the AAA policy because there’s no condition to fail the authorization check.

By contrast, ns_false or false would always deny access, and while true might seem like it would work, the canonical, supported way in Citrix ADC policy language to express unconditional permit is ns_true. Keep in mind that an always-true policy should be used with caution in production environments due to security implications.