Help Center> Cloud Firewall> Best Practices> Configuring Access Policies for IP Address Groups and Service Groups

Updated on 2023-12-06 GMT+08:00

View PDF

Configuring Access Policies for IP Address Groups and Service Groups

After a protected object is connected to CFW, you can configure access control policies for IP address groups and service groups, and verify the effect of the policies. This section uses the configuration of IP address and service groups as an example to describe how to configure IP address and service access control policies in batches.

Scenario

If your service is deployed in an enterprise that has many IP addresses and services, you need to configure access control policies for users' IP address groups and service groups to permit or block certain access requests.

Prerequisites

A website to be protected has been connected to CFW.
Intrusion prevention has been enabled and Action has been set to Block.

Configuring an Access Control Policy

For details about how to add an IP address group, see Adding an IP Address Group.
For details about how to add a service group, see Adding a Service Group.
For details about how to add a protection rule, see Adding a Protection Rule.