Configuring Protection Policies

Protection Configuration Overview

Configuring Basic Web Protection to Defend Against Common Web Attacks

Configuring Intelligent Access Control Rules to Accurately Defend Against CC Attacks

Configuring CC Attack Protection Rules to Defend Against CC Attacks

Configuring Custom Precise Protection Rules

Configuring IP Address Blacklist and Whitelist Rules to Block or Allow Specified IP Addresses

Configuring Geolocation Access Control Rules to Block or Allow Requests from Specific Locations

Configuring Threat Intelligence Access Control Rules to Block or Allow IP Addresses in a Specified IP Address Library

Configuring Web Tamper Protection Rules to Prevent Static Web Pages from Being Tampered With

Configuring Anti-Crawler Rules

Configuring Information Leakage Prevention Rules to Protect Sensitive Information from Leakage

Configuring a Global Protection Whitelist Rule to Ignore False Alarms

Configuring Data Masking Rules to Prevent Privacy Information Leakage

Configuring a Scanning Blocking Rule to Automatically Block Heavy-Traffic Attacks

Configuring Bot Protection Rules to Defend Against Bot Behavior

Creating a Reference Table to Configure Protection Metrics in Batches

Configuring a Known Attack Source Rule to Block Specific Visitors for a Specified Duration

Condition Field Description

Application Types WAF Can Protect