vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/wafd/umn/waf_01_0363.html
Li, Qiao aea4b89c6e WAF Dedicated User Guide 20231030 version. 
Reviewed-by: Rogal, Marcel <mrogal@noreply.gitea.eco.tsi-dev.otc-service.com>
Co-authored-by: Li, Qiao <qiaoli@huawei.com>
Co-committed-by: Li, Qiao <qiaoli@huawei.com>
2024-10-01 07:48:08 +00:00

3.3 KiB
Raw Permalink Blame History

What Are the Differences Between Blacklist/Whitelist Rules and Precise Protection Rules on Blocking Access Requests from Specified IP Addresses?

Both of them can block access requests from specified IP addresses. Table 1 describes the differences between the two types of rules.

Table 1 Differences between blacklist and whitelist rules and precise protection rules

Protection Rules

Protection

WAF Inspection Sequence

Blacklist and whitelist rules

This type or rules can block, log only, or allow access requests from a specified IP address or IP address range.

Blacklist and whitelist rules have the highest priority.

WAF checks access requests based on the protection rules and the triggering sequence.

Precise protection rules

You can combine common HTTP fields, such as IP, Path, Referer, User Agent, and Params in a protection rule to let WAF allow or block the requests that match the combined conditions.

Precise protection rules have lower priority compared with blacklist and whitelist rules.
Parent topic: Protection Rules