Rule Management
Purpose
On the Rule Management tab you can monitor which rules vWAF currently uses as a result of Vulnerability Management.
Future versions will also show the rules created as a result of Malware detection here.
Opening
To access Rule Management:
Information displayed
Column | Meaning |
---|---|
Category |
Shows which category of attack may be carried out via the identified vulnerability. The category name is provided by the external service used. |
Provider |
Shows who provides the mitigation rule. Mitigation rules may either be provided by the report file that you’ve imported from your external service provider, or by vWAF Baseline Protection. |
Description |
Contains a more detailed description of the particular attack vector. The text is provided by the external service used. |
Pattern |
Exact pattern that vWAF looks for in your web application. If this pattern matches with a request, vWAF applies the configured mitigation rules for this request. |