config system global

set cert-expire-check-time <cert-expire-check-time _int>

end

waf xml-validation

config waf xml-validation rule

edit "<xml_rule_name>"

set data-format {xml | soap}

set soap-attachment {allow | disallow}

next

end

waf machine-learning-policy

config waf machine-learning-policy

edit waf machine-learning-policy

set threat-model {enable | disable}

end

log attack-log

config log attack-log

set http2-parse-error-output {enable | disable}

end

waf http-constraints-exceptions

config waf http-constraints-exceptions

edit "<http-exception_name>"

config http_constraints-exception-list

edit <entry_index>

set Internal-resource-limits-check {enable | disable}

set rpc-protocol-check {enable | disable}

next

end

next

end

waf http-protocol-parameter-restriction

diagnose debug dnsproxy list

execute fdnserver show

execute fdnserver delete

system advanced

config system advanced

set max-bot-alert-interval <interval_int>

end

server-policy policy

config server-policy policy

edit <policy_name>

set proxy-protocol {enable | disable}

set use-proxy-protocol-addr {enable | disable}

set replacemsg <replacemsg_name>

next

end

server-policy server-pool

config server-policy server-pool

edit <server-pool_name>

set proxy-protocol {enable | disable}

set proxy-protocol-version {v1 | v2}

next

end

server-policy pattern threat-weight

config server-policy pattern threat-weight

set bot-deception {off | low | med | high | crit}

set biometrics-based-detection {off | low | med | high | crit}

set threshold-bot-detection {off | low | med | high | crit}

set bot-detection {off | low | med | high | crit}

set mobile-api-protection {off | low | med | high | crit}

set json-protection {off | low | med | high | crit}

set openapi-validation {off | low | med | high | crit}

set cors-protection {off | low | med | high | crit}

set site-publish {off | low | med | high | crit}

end

server-policy vserver

config server-policy vserver

edit "<virtual-server_name>"

config vip-list

edit "<vip-list_id>"

set interface "<interface_name>"

set status {enable | disable}

set vip "<vip_str>"

set use-interface-ip {enable | disable}

next

end

next

end

waf bot-detection-policy

config waf bot-detection-policy

edit <bot-detection-policy_ID>

set policy-id <server-policy-id>

set verification-method {Disable | Real-Browser-Enforcement | Captcha-Enforcement}

set mobile-verification-method {Disable | Mobile-Token-Validation}

next

end

waf machine-learning-policy

config waf machine-learning-policy

edit <waf machine-learning-policy_id>

set learning-time <the-number-of-weeks>

set anomaly-detection-threshold <anomaly-detection-threshold_int>

set parameters-limit-per-conn {enable | disable}

set sample-collecting-mode {normal | fast}

set threat-model {enable | disable}

end

config waf web-protection-profile offline-protection

edit "<offline-protection-profile_name>"

set mobile-app-identification {enable | disable}

set token-secret <token-secret_str>

set token-header <token-header_str>

set mobile-api-protection <mobile-api-protection_name>

next

end

waf web-protection-profile inline-protection

config waf web-protection-profile inline-protection

edit "<inline-protection-profile_name>"

set mobile-app-identification {enable | disable}

set token-secret <token-secret_str>

set token-header <token-header_str>

set mobile-api-protection <mobile-api-protection_name>

set bot-mitigate-policy <bot-mitigate-policy_name>

set api-management-policy <api-management-policy_name>

next

end

waf mobile-api-protection

config waf mobile-api-protection-rule

edit <mobile-api-protection-rule_name>

set host-status {enable | disable}

set host <host_str>

set action {alert | deny_no_log | alert_deny | block-period}

set block-period <block-period_int>

set severity {High | Medium | Low | Info}

set trigger <trigger_policy_name>

config url-list

edit <url-list_id>

set url-type {plain | regular}

set url-pattern <url-pattern_str>

next

end

next

end

config waf mobile-api-protection-policy

edit <mobile-api-protection-policy_name>

config rule-list

edit <rule-list_id>

set rule <rule_name>

next

end

next

end

waf ftp-file-security

config waf ftp-file security

edit "<rule_name>"

set icap-server-check {enable | disable}

next

end

waf site-publish-helper policy

config waf site-publish-helper policy

edit "<site-publish-policy_name>"

set limit-users {enable | disable}

set maximum-users <integer>

set session-idle-timeout <integer>

next

end

system vip

config system vip

edit <vip_name>

set vip <ip&netmask>

set vip6 <ip&netmask>

set interface <interface_name>

set index <the_index_number>

next

end

server-policy vserver

config server-policy vserver

edit "<virtual-server_name>"

set status {enable | disable}

set interface "<interface_name>"

set vip "<virtual-ip_ipv4mask>"

set vip6 "<virtual-ip_ipv6mask>"

set use-interface-ip {enable | disable}

next

end

system ha

config system ha

set mode {active-passive | active-active-standard | active-active-high-volume |standalone}

next

end

system ha-node

config system ha-node

edit <HA_node_number>

set <HA_node_device_SN>

next

end

system ha-traffic-distribution

config system ha-traffic-distribution

edit <traffic-distribution_name>

set node-order <the_index_of_node_with_highest_priority>

set node-order <the_index_of_node_with_secondary_priority>

set node-order <the_index_of_node_with_third_priority>

...

set vip-list <vip_names>

next

end

system snmp community

config system snmp community

edit <community_index>

set status {enable | disable}

set name "<community_str>"

set events {cpu-high | intf-ip | log-full | mem-low | netlink-down-status | netlink-up-status | policy-start | policy-stop | pserver-failed | sys-ha-cluster-status-change | sys-ha-member-join | sys-ha-member-leave | sys-mode-change | waf-access-attack | waf-amethod-attack | waf-blogin-attack |waf-hidden-fields | waf-pvalid-attack | waf-signature-detection | waf-url-access-attack | waf-spage-attack | power-supply-failure}

next

end

system snmp user

config system snmp user

edit name "<user_str>"

set trapevent {cpu-high | intf-ip | log-full | mem-low | netlink-down-status | netlink-up-status | policy-start | policy-stop | pserver-failed | sys-ha-cluster-status-change | sys-ha-member-join | sys-ha-member-leave | sys-mode-change | waf-access-attack | waf-amethod-attack | waf-blogin-attack |waf-hidden-fields | waf-pvalid-attack | waf-signature-detection | waf-url-access-attack | waf-spage-attack | power-supply-failure}

next

end

system icapserver

config system icapserver

set server "<server_ipv4>"

set cache-timeout <timeout_int>

set port <port_int>

set elog {enable | disable}

set service-name <name_str>

set ssl {enable | disable}

end

system feature-visibility

config system feature-visibility

set mobile-app-identification {enable | disable}

end

user kerberos-user

config user kerberos-user

edit "<kdc_name>"

set realm "<realm_str>"

set shortname <shortname _str>

set status {enable | disable}

config server-members

edit "<entry_index>"

set server <server_str>

set port <port_int>

next

end

next

end

log attack-log

config log attack-log

set packet-log {account-lockout-detection | anti-virus-detection | cookie-security | credential-db-detection | csrf-detection | custom-access | custom-protection-rule | fsa-detection | hidden-fields-failed | http-protocol-constraints | illegal-file-type | illegal-filesize | cors-protection | json-protection | ip-intelligence | padding-oracle | parameter-rule-failed | signature-detection | trojan-detection | user-tracking-detection | xml-protection | machine-learning | openapi-validation | websocket-security | mobile-api-protection}

end

system certificate ocsp-stapling

config system certificate ocsp-stapling

edit <ocsp_name>

set certificate "<certificate_name>"

set local-cert "<certificate_name>"

set comment <comment_str>

set ocsp_url <url>

next

end

waf http-request-flood-prevention-rule

config waf http-request-flood-prevention-rule

edit "<rule_name>"

set mobile-app-identification {disabled | mobile-token-validation}

set bot-confirmation {enable | disable}

next

end

waf layer4-access-limit-rule

config waf layer4-access-limit-rule

edit "<rule_name>"

set mobile-app-identification {disabled | mobile-token-validation}

set bot-confirmation {enable | disable}

next

end

waf xml-validation

config waf xml-validation rule

edit "<xml_rule_name>"

set data-format {xml | soap}

set soap-attachment {allow | disallow}

set ws-i-basic-profile-assertion {WSI1001 | WSI1002 | WSI1003 | WSI1004 | WSI1006 | WSI1007 | WSI1032 | WSI1033 | WSI1109 | WSI1110 | WSI1111 | WSI1201 | WSI1202 | WSI1204 | WSI1208 | WSI1301 | WSI1307 | WSI1308 | WSI1309 | WSI1318 | WSI1601 | WSI1701}

set ws-i-basic-profile-wsdl-assertion {WSI1008 | WSI1116 | WSI1211}

next

end

waf http-constraints-exceptions

config waf http-constraints-exceptions

edit "<http-exception_name>"

config http_constraints-exception-list

edit <entry_index>

set rpc-protocol-check {enable | disable}

next

end

next

end

waf bot-deception

config waf bot-deception

edit <bot-deception-policy-name_str>

set action {alert | alert_deny | block-period | deny_no_log}

set block-period <block_period_int>

set deception-url <url_str>

set severity {high | medium | low | Info}

set trigger <trigger_policy>

config url-list

edit <url-list_id>

set host <host_str>

set host-status {enable | disable}

set type {simple-string | regex-expression}

set url <url_str>

next

end

next

end

waf biometrics-based-detection

config waf biometrics-based-detection

edit <biometrics-based-detection-name_str>

set mouse-movement {enable | disable}

set click {enable | disable}

set screen-touch {enable | disable}

set keyboard {enable | disable} on page 1

set scroll {enable | disable}

set event-collection-time <time_int>

set bot-effective-time <time_int>

set action {alert | alert_deny | | deny_no_log}

set severity {high | medium | low | Info}

set trigger <trigger_policy>

config url-list

edit <url-list_id>

set host <host_str>

set host-status {enable | disable}

set type {simple-string | regex-expression}

set url <url_str>

next

end

next

end

waf bot-mitigation-policy

config waf bot-mitigate-policy

edit bot-deception <bot-deception_str>

set bot-deception <bot-deception_str>

set biometrics-based-detection <biometrics-based-detection_str>

set threshold-based-detection <threshold-based-detection_str>

next

end

waf file-upload-restriction-policy

config waf file-upload-restriction-policy

edit <file-upload-restriction-policy_name>

set What’s new

next

end

waf threshold-based-detection

config waf threshold-based-detection

edit "<policy_name>"

set bot-recognition {disabled | real-browser-enforcement | captcha-enforcement}

set mobile-app-identification {disabled | mobile-token-validation}

set bot-confirmation {enable | disable}

set validation-timeout <validation-timeout_int>

set max-attempt-times <max-attempt-times_int>

set crawler-detection {enable | disable}

set crawler-action {alert | deny_no_log | alert_deny | block-period}

set crawler-severity {High | Medium | Low | Info}

set crawler-trigger <crawler-trigger-policy_name>

set crawler-occurrence-num <crawler-occurrence-num_int>

set crawler-within <crawler-within_int>

set crawler-block-period <crawler-block-period_int>

set scanner-detection {enable | disable}

set scanner-action {alert | deny_no_log | alert_deny | block-period}

set scanner-severity {High | Medium | Low | Info}

set scanner-trigger <scanner-trigger-policy_name>

set scanner-occurrence-num <scanner-occurrence-num_int>

set scanner-within <scanner-within_int>

set scanner-block-period <scanner-block-period_int>

set slow-attack-detection {enable | disable}

set slow-attack-action {alert | deny_no_log | alert_deny | block-period}

set slow-attack-severity {High | Medium | Low | Info}

set slow-attack-trigger <slow-attack-trigger-policy_name>

set slow-attack-occurrence-num <slow-attack-occurrence-num_int>

set slow-attack-within <slow-attack-within_int>

set slow-attack-http-transaction-timeout <slow-attack-http-transaction-timeout_int>

set slow-attack-packet-interval-timeout <slow-attack-packet-interval-timeout_int>

set slow-attack-block-period <slow-attack-block-period_int>

set content-scraping-detection {enable | disable}

set content-scraping-action {alert | deny_no_log | alert_deny | block-period}

set content-scraping-severity {High | Medium | Low | Info}

set content-scraping-trigger <content-scraping-trigger-policy_name>

set content-scraping-occurrence-num <content-scraping-occurrence-num_int>

set content-scraping-within <content-scraping-within_int>

set content-scraping-block-period <content-scraping-block-period_int>

set brute-login-detection {enable | disable}

set brute-login-action {alert | deny_no_log | alert_deny | block-period}

set brute-login-severity {High | Medium | Low | Info}

set brute-login-trigger <brute-login-trigger-policy_name>

set brute-login-occurrence-num <brute-login-occurrence-num_int>

set brute-login-within <brute-login-within_int>

set brute-login-request-file <brute-login-request-file_str>

set brute-login-block-period <brute-login-block-period_int>

next

end

waf x-forwarded-for

config waf x-forwarded-for

edit "<x-forwarded-for_name>"

set ip-location {left | right}

set skip-private-original-ip {enable | disable}

config ip-list

edit <entry_index>

set ip "<load-balancer_ip>"

next

end

next

end

waf api-policy

config waf api-policy

edit <api-policy_name>

config api-rule-list

edit <api-rule-list_id>

set api-rule-name <api-rule-name_str>

next

end

next

end

waf api-rules

config waf api-rules

edit <api-rules_name>

set api-key-verification {enable | disable}

set allow-user-group <allow-user-group_name>

set api-key-location {http-parameter | http-header}

set header-field-name <header-field-name_str>

set parameter-name <parameter-name_str>

set rate-limit-period <rate-limit-period_int>

set rate-limit-requests <rate-limit-requests_int>

set action {alert | deny_no_log | alert_deny | block-period}

set block-period <block-period_int>

set severity {High | Medium | Low | Info}

set trigger-policy <trigger-policy_str>

set host <host_str>

set host-status {enable | disable}

config attach-http-header

edit <attach-http-header_id>

set http-header-item <http-header-item_str>

next

end

config match-url-prefixes

edit <match-url-prefixes_id>

set frontend-prefix <frontend-prefix_str>

set backend-prefix <backend-prefix_str>

next

end

config sub-url-setting

edit <sub-url-setting_id>

set http-method {get | post | head | options | trace | connect | delete | put | patch | any}

set type {plain | regular}

set url-expression <url-expression_str>

set api-key-verification {enable | disable}

set api-key-location {http-parameter | http-header}

set header-field-name <header-field-name_str>

set parameter-name <parameter-name_str>

set rate-limit-period <rate-limit-period_int>

set rate-limit-requests <rate-limit-requests_int>

set allow-user-group <allow-user-group_name>

set api-key-inherit {enable | disable}

next

end

next

end

waf api-user-group

config waf api-user-group

edit <api-user-group_name>

config user-list

edit <user-list_id>

set api-user-name <api-user-name_str>

next

end

next

end

waf api-users

config waf api-users

edit <api-user_name>

set email <email_str>

set comments <comments_str>

set uuid <uuid_str>

set api-key <api-key_str>

set create-time <create-time_str>

config ip-access-list

edit <ip-access-list_id>

set ip <ip_str>

end

config http-referer-list

edit <http-referer-list_id>

set http-referer <http-referer_str>

next

end

next

end

system replacemsg-image