Configuring a WAF Profile
A WAF profile references the WAF policies that are to be enforced.
Predefined WAF profiles describes the predefined profiles. In many cases, you can use predefined profiles to get started.
| Predefined Profiles | Description |
|---|---|
|
High-Level-Security |
|
|
Medium-Level-Security |
|
|
Alert-Only |
|
If desired, you can create user-defined profiles. The maximum number of profiles per VDOM is 255.
Before you begin:
- You can use predefined WAF profiles, create profiles based on predefined feature options, or create profiles based on user-defined configuration objects. If you want to add user-defined configuration objects, you must create them before using this procedure to add them to a WAF profile.
- You must have Read-Write permission for Security settings.
After you have created a WAF profile, you can specify it in a virtual server configuration.
To configure a WAF Profile:
- Go to Web Application Firewall > Web Application Firewall.
- Click the WAF Profile tab.
- Click Create New to display the configuration editor.
- Complete the configuration as described in WAF Profile configuration.
- Save the configuration.
| Settings | Guidelines |
|---|---|
|
Name |
Configuration name. Valid characters are After you initially save the configuration, you cannot edit the name. |
|
Description |
A string to describe the purpose of the configuration, to help you and other administrators more easily identify its use. |
|
Web Attack Signature |
Select a predefined or user-defined Web Attack Signature configuration object. |
|
URL Protection |
Select a user-defined URL Protection configuration object. |
|
HTTP Protocol Constraint |
Select a predefined or user-defined HTTP Protocol Constraint configuration object. |
|
SQL/XSS Injection Detection |
Select a predefined or user-defined SQL/XSS Injection Detection configuration object. |
|
Exception Name
|
Select a user-defined exception configuration object. Exceptions identify specific hosts or URL patterns that are not subject to processing by this rule. |
|
Bot Detection |
Select a user-defined Bot Detection configuration object. |