The blocklist/allowlist feature of the WAF refers to setting the blocklist/allowlist for source IP addresses transiting through WAF-protected domain names, as well as performing precise allowlist settings for multiple HTTP characteristics. The main features include: IP blocklist/allowlist settings, precise allowlist settings, and rule allowlist settings.
- IP blocklist/allowlist settings support setting domain-based or global IP blocklist/allowlist rules, and support IP range settings.
- Precise allowlist settings support combining multiple characteristics of HTTP messages such as the request path, GET parameters, POST parameters, Referer, and User-Agent, and adding the specific public network user access to the allowlist through characteristic matching.
- Rule allowlist settings support combining rule type, rule ID, and multiple characteristics of HTTP messages such as the request path, GET parameters, POST parameters, Referer, and User-Agent, and allow traffic according to the combination characteristics, rule ID, or rule type.
Meanwhile, you can add domain-based or global blocklists/allowlists. The effectiveness priority description is as follows: - The priority of the blocklist/allowlist is only lower than the precise allowlist policy of WAF and higher than other detection logics.
- Priority from high to low of the blocklist/allowlist: Global allowlist, domain name allowlist, rule allowlist, precise allowlist policy, domain name blocklist, and other protection modules.