Emergency Plan for the False Interception of Customer Workload by the Protected Domain Name

After a protected domain name is connected to WAF, normal access to some URLs is intercepted. Based on an assessment of the business impact scope, it is recommended to sequentially use Method 3, Method 2, and Method 1.

Emergency Method 1: Adding to Allowlist (Allow Specific Allowlist and Intercept Other Access that Hits Rules)

Add allowing rules on the console page.

Select the Precise Allowlist.

Configure rules according to the path of the alarm.

If the above configuration does not meet expectations, execute Method 2.

Emergency Method 2: Changing the Traffic Mode to Image Mode (Alarm Only Without Interception)

Change the WAF working mode to image mode on the console page.
Click Access Management and configure the Image Mode.

If the configuration still does not meet expectations, execute Method 3.

Emergency Method 3: Disabling the Protection Capability of the Domain Name (No Alarms or Interception)

Turn off the WAF switch on the console page. At this point, the entire domain name does not intercept any attacks.