Web Application Firewall:User Guide

Feature

WAF 3.0

WAF 2.0

Enable WAF

• Purchase a WAF 3.0 subscription instance

• Purchase a WAF 3.0 pay-as-you-go instance

New purchases are not supported

Onboard to WAF

• Cloud native mode

  • Enable WAF protection for an ALB instance

  • Enable WAF protection for an MSE instance

  • Enable WAF protection for a Function Compute function

  • Enable WAF protection for CLB instances

  • Enable WAF protection for an ECS instance

• CNAME record

  • Enable WAF protection for a website using a CNAME record

• Transparent proxy mode

• CNAME record

  1. Add a domain name

  2. Change the DNS settings for a domain name

Configure protection policies

• Configure protected objects and protected object groups

• Configure protection rules

  • Core web protection rules and rule groups

  • Whitelist rules

  • IP blacklist rules

  • Custom rules

  • Configure protection rules for the scan protection module

  • Custom response rules

  • HTTP flood protection rules

  • Location Blacklist rules

  • Web tamper-proofing rules

  • Data leakage prevention rules

  • Major event support

  • Bot management

• Protection Rules Engine

• Whitelist

  • Website whitelist

  • Web intrusion protection whitelist

  • Data security whitelist

  • Bot management whitelist

  • Access control or rate limiting whitelist

• IP blacklist

• Custom mitigation policies

• Scan protection

• HTTP flood protection

• Website tamper-proofing

• Data leakage prevention

• Proactive defense

• Account security

• Bot management

Configure monitoring and alerting

• Configure Cloud Monitor notifications

• Configure Simple Log Service

• Configure Cloud Monitor notifications

• Configure Simple Log Service

View protection data

• Security reports

• Log query

• Security reports

• Log query