Skip to main content

Rules

Depending on the Paranoia Level selected in the General tab of the WAF module, traffic is subject to several WAF rules. While users cannot choose individual rules to apply, they can create rule exclusions on a global or resource-specific level. This section is particularly useful during the WAF tuning exercise.

Web Application Firewall

A wildcard, defined by {*}, can be inserted when listing a path so that multiple resources can be covered by one exclusion, for example:
/image/{*}

The wildcard can also stand in for file extensions or as dynamic text between two static segments of the path:
/image/{*}/items

It's also possible to exclude all rules for a specific path.

Rule Conflict​

When there is a rule conflict, the rule with more specific attributes takes precedence only if it includes more rules than the less specific path.