Overview
Download
Modo Foco
Tamanho da Fonte
Feature Introduction
The rule configuration feature is designed to protect API security. It provides nine types of rules, covering scenarios such as security event detection, sensitive content detection, authentication credential identification, rate limiting, request parameter check, feature scenario recognition, API asset discovery, whitelist sensitive data and block unavailable assets.
For some rule types, the system provides built-in rules. These rules are enabled by default, can be enabled or disabled, but cannot be edited or deleted. The system also supports adding custom rules, which can be edited or deleted.
Prerequisites
1. You have purchased a WAF yearly/monthly subscription instance and enabled API security.
2. You have completed Domain Onboarding or Instance Object Onboarding.
3. You have enabled the API security switch for the corresponding domain on the Domain Onboarding page. After it is enabled, the analysis is expected to be completed within 30 minutes, after which relevant statistical data will be displayed.
API Rule Switch
The top of the rule configuration page provides an independent global switch for each rule type, allowing you to enable or disable all rules of that type with one click.
1. Log in to the WAF console. In the left sidebar, choose API Security > Rule Configuration.
2. Click the domain drop-down list in the upper-left corner of the Rule Configuration page, and select the domain you want to view.
Note:
The Rule Configuration page does not provide an option for all domains. You must select a specific domain.
3. On the top of the rule configuration page, locate the global switch for the corresponding rule type. Click it to enable or disable all rules under that category.
Ajuda e Suporte
Esta página foi útil?
Você também pode entrar em contato com a Equipe de vendas ou Enviar um tíquete em caso de ajuda.
comentários