Security Center:Blacklists and whitelists for automatic access

Blacklist and whitelist rules

Add a blacklist or whitelist

The following steps describe how to add a blacklist. The steps to add a whitelist are similar.

1. Log on to the Security Center console.

2. In the left-side navigation pane, choose Protection Configuration > Application Protection. In the upper-left corner of the console, select the region where your assets are located: Chinese Mainland or Outside Chinese Mainland.

3. On the Application Configurations tab, click Management Settings in the upper-right corner.

4. In the Management Settings panel, on the Manage Access Rule tab, click the Blacklist tab, and then click Add Blacklist.

5. In the Add Blacklist dialog box, configure the following parameters and click OK.

   Parameter	Description
   Rule Name	Enter a name for the blacklist rule.
   Rule Switch	The rule is enabled by default.
   Effective Application Type	Select the application language to which the blacklist applies: Java or PHP.
   Match Condition	Select a condition to match for the blacklist rule. Valid values: cmdline: Matches processes to exclude based on their command-line parameters. The supported match operators are: contains, does not contain, contains one of multiple values, and does not contain any of the values. Environment Variables : Matches processes to exclude based on the environment variables they access. The only supported match operator is equals. -D parameter : Matches processes to exclude based on the system properties set at Java program startup. The only supported match operator is equals. Note This option is available only when Effective Application Type is set to Java. Container Name: Matches processes to exclude based on the name of the container to which they belong. The supported match operators are: contains, does not contain, contains one of multiple values, and does not contain any of the values. Note This option is available only when Effective Application Type is set to PHP. Click Add Condition to add multiple match conditions. The logical relationship between conditions is AND, meaning a process must meet all conditions to match the rule. Examples: To exclude processes whose startup parameters contain the string tomcat: For Condition, select cmdline. For Match Mode, select Include. For Content to Match, enter tomcat. To exclude processes whose startup parameters do not contain the strings apache or test: For Condition, select cmdline. For Match Mode, select Does Not Contain Any Value. For Content to Match, enter apache,test.
   Match Mode	Select a match operator for the rule.
   Match Field	Enter the field to match. Note This parameter is required only when Match Condition is set to Environment Variables or -D parameter .
   Content to Match	Enter the content to match.
   Destination Application Groups	Select the application groups to which this blacklist rule applies. The application type of the selected groups must match the type specified for Effective Application Type.

Edit or delete a blacklist or whitelist

1. Log on to the Security Center console.

2. In the left-side navigation pane, choose Protection Configuration > Application Protection. In the upper-left corner of the console, select the region where your assets are located: Chinese Mainland or Outside Chinese Mainland.

3. On the Application Configurations tab, click Management Settings in the upper-right corner.

4. In the Management Settings panel, on the Manage Access Rule tab, go to the Blacklist or Application Access Whitelist sub-tab. Find the rule you want to manage and click Edit or Delete in the Actions column.

   You can delete a rule only if no application group is using it. Before deleting a rule, you must first remove it from all associated application groups.

Automatic full access (Java processes only)