Managing the Web Application Firewall rules

Edit online

In the local management interface, go to Web > Global Settings > Web Application Firewall. A list of all web application firewall rules is displayed. You can create, edit and delete rules or update the crs-setup.conf file. The Web Application Firewall rules and crs-setup.conf file is shared by all Reverse Proxy instances on the appliance.

Before you begin

Ensure that your browser allows pop-up windows to be displayed.

Procedure

  1. Log in to the local management interface.
  2. Click Web > Global Settings > Web Application Firewall
  3. Perform one of the following actions:
    • Edit crs-setup.conf
      1. Click crs-setup.conf > Edit configuration file.
      2. Modify the content of the file.
      3. Click OK to save the updated configuration.
      Import crs-setup.conf
      1. Click crs-setup.conf > Import.
      2. Click Browse.
      3. Browse to the file that you want to import to crs-setup.conf.
      4. Click OK.
      Export crs-setup.conf
      1. Click crs-setup.conf > Export.
      2. Confirm the save operation when your browser displays a confirmation window.
      Creating a new Web Application Firewall rule
      1. Click New.
      2. Modify the content of the file.
      3. Enter the name for the file.
        Note: The file name should end with the .conf suffix otherwise it will not be recognised as a rules file.
      4. Click OK to create the new rule.
      Editing an existing Web Application Firewall rule
      1. Select the rule which you wish to edit.
      2. Click Edit.
      3. Modify the content of the file.
      4. Click OK to update the existing rule.
      Deleting an existing Web Appliction Firewall rule
      1. Select the rule which you wish to delete.
      2. Click Delete.
      3. Click OK to confirm the deletion of the selected rule.
      Renaming an existing Web Application Firewall rule
      1. Select the file which you wish to rename.
      2. Click Manage > Rename.
      3. Enter the new name for the file.
      4. Click OK.
      Import a Web Application Firewall rule
      1. Select Manage > Import.
      2. Click Browse.
      3. Browse to the file that you want to import.
      4. Click OK.
        Note: If an existing file has the same name as the file being imported, the existing file will be overwritten.
      Export a Web Application Firewall rule
      1. Select the file which you wish to export.
      2. Click Manage > Export.
      3. Confirm the save operation when your browser displays a confirmation window.
      Import a zip file of Web Application Firewall rules
      1. Click Manage > Import Zip.
      2. Click Browse.
      3. Browse to the zip file that you want to import.
      4. Click OK.
        Note: The rule files within the zip file will be added to the existing rules.
        Note: If an existing file has the same name as a file within the zip file being imported, the existing file will be overwritten.
      Export a zip file of Web Application Firewall rules
      1. Click Manage > Export Zip.
      2. Confirm the save operation when your browser displays a confirmation window.
  4. Deploy the changes as described in Configuration changes commit process.