Batch Blocking and Canceling Batch Blocking of an IP Address or IP Address Range

Scenario

You can batch block access from blacklisted IP addresses, IAM users, or IP address ranges.

You can add an IP address, IAM user, or IP address range as blocked object for an emergency policy in several operation connections. If there is no need to block an IP address, IAM user, or IP address range for operation connections, you can cancel the blocking from all operation connections.

This section describes how to block or cancel blocking of IP addresses or IP address ranges in multiple connections.

Limitations and Constraints

If an IP address or IP address range or an IAM user is added to the blacklist, CFW, WAF, VPC, and IAM will block requests from that IP address without checking whether the requests are malicious.

Enabling an IP Address Blocklist for Multiple Connections

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
4. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 1 Workspace management page
   

5. In the navigation pane on the left, choose Risk Prevention > Security Policies. Then, go to the emergency policy page.
6. On the emergency policy page, locate the row that contains the policy you want to enable batch block and click Batch Block in the Operation column.
7. In the displayed dialog box, enter the blocking reason and click OK.

Canceling Batch Block

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
4. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 2 Workspace management page
   

5. In the navigation pane on the left, choose Risk Prevention > Security Policies. Then, go to the emergency policy page.
6. On the emergency policy page, locate the row that contains the target policy, click Cancel Blocking in Batches in the Operation column.
7. In the dialog box displayed, enter the reason for canceling the blocking and click OK.