ESA provides security protection capabilities such as real-time threat detection, intrusion prevention, and traffic scrubbing. You can quickly establish a basic security defense based on security and event analytics.
Set up a general protection
Follow the steps to set up a general protection for your website.
Enable smart rate limiting
ESA provides a smart rate limiting feature to establish a baseline and adjust the rate limits every 24 hours by analyzing access frequency data from your website over the past seven days. This way, sudden high-frequency access attacks can be effectively avoided.
We recommend that you do not activate this feature if your website experiences frequent sudden increases in traffic.
In the left-side navigation pane, choose . On the page that appears, turn on Smart Rate Limiting.
Adjust your protection level
ESA assesses incoming requests based on a well-stocked threat intelligence library. Identified malicious requests are challenged based on the security level you configured. Only requests that pass the challenges can be served as expected. You can adjust the security level based on the actual situation.
In the left-side navigation pane, choose . On the page that appears, in the Security Level section, click Configure to specify the Security Level parameter.
Use security analytics for bot management
The security analytics dashboards also provide bot analytics for traffic requesting your website. You can create bot management policies based on the analytics results.
Only Enterprise plans support the Create Bot Management Rule from Filters feature.
In the ESA console, choose Websites and click the name of the website you want to manage.
In the left-side navigation pane, choose .
In the Overview section, click the Bot Analytics tab. Click Filter on the right side of the feature you want to configure, such as Definite Bots, and then click Create Bot Rule With Filter Conditions, or set up rules manually.
Refer to What is Professional Mode on the Bots feature's Create Ruleset page to configure anti-crawling settings for your website or application.