Preconditions (Selectors)

In vWAF you can create the security configuration in detail on the level of individual paths (see Editing Paths). The validity of the rules stored for these paths can be restricted using preconditions (see Application Mapping, Paths, Preconditions).

Overview

The following selectors are available for defining preconditions:

• Argument Selector

  Permits path-specific handling dependent on specific arguments in an URL.

• Client IP Selector

  Specifies IP sectors to which path-specific rules are to apply.

• Content Type Selector

  Permits path-specific handling dependent on the content type specified in a request (Internet Media Type, MIME Type).

• Content Length Selector

  Permits path-specific handling dependent on the content length of a request.

• Host Name Selector

  Permits specific path handling based on the specified host names.

• HTTP Method Selector

  Permits path-specific handling dependent on the method specified in a request (GET, HEAD, POST).

• The HTTP Protocol Selector

  Ensures that vWAF only includes a ruleset when the ruleset is carried out via a specific version of the HTTP protocol.

• The Request Selector

  Ensures that vWAF only considers a ruleset for a path if a specific request line has been sent.

• SSL Selector

  Ensures that vWAF only considers a ruleset for a path when a request is made via an SSL connection, or only when it’s made via a non-SSL connection.

• Time Selector

  Allows path-specific rules to be handled based on the day of the week and time.

• Url Selector

  Can further restrict the URLs of a path.