You can use the protection rules provided by Web Application Firewall (WAF) to customize your rule groups for a specific protection feature, such as Protection Rules Engine, also known as web application protection. If default protection rule groups do not meet your business requirements, we recommend that you customize protection rule groups to protect your website.
Prerequisites
- A WAF instance is purchased. The instance must meet the following requirements:
- The instance uses the subscription billing method.
- If the instance is deployed in the Chinese mainland, the instance must be of the Business edition or higher.
- If the instance is deployed outside the Chinese mainland, the instance must be of the Enterprise edition or higher.
For more information, see Purchase a subscription WAF instance.
- Your website is added to WAF. For more information, see Tutorials.
Background information
Use a custom rule group
- Create a rule group: Create a custom rule group for a specific protection feature.
- Apply the rule group: Apply the created rule group to your website.
Create a rule group
Apply the rule group
- On the Protection Rule Group page, apply the rule group to a website. The following procedure is provided for this scenario.
- On the Website Protection page, select the rule group from the Protection Rule Group drop-down list in the
Protection Rules Engine card.
For more information, see Configure the protection rules engine feature.
What to do next
You can perform the following operations to manage the created rule group on the Protection Rule Group page:
- Copy: allows you to copy the configurations of the rule group.
You can change the settings for Rule Group Name, Description, and Automatic Update. However, you cannot change the setting for Rule Group Template or the rule settings. If you want to change the rule settings, we recommend that you copy the rule group and change the rule settings in the copied rule group.
- Edit: allows you to change the name, description, and rule settings of the rule group. Default rule groups cannot be edited.
- Delete: allows you to delete the rule group. Default rule groups cannot be deleted.
Before you delete a custom rule group, make sure that it is not applied to a website. If the rule group is applied to a website, apply a different rule group to the website before you delete the rule group.