Creating a Reference Table to Configure Protection Metrics in Batches

Prerequisites

• You have connected a website to WAF.
• You have created a policy and added the domain name to it. For details, see Creating a Protection Policy and Adding a Domain Name to a Policy.
• If you use a dedicated WAF instance, make sure it has been upgraded to the latest version. For details, see Managing Dedicated WAF Engines.

Constraints

This function is not supported in the standard edition.

Application Scenarios

Reference tables can be used for configuring multiple protection fields in CC attack protection, bot rule, anti-crawler, and precise protection rules.

Creating a Reference Table

1. Log in to the WAF console.
2. Click in the upper left corner and select a region or project.
3. (Optional) If you have enabled the enterprise project function, in the upper part of the navigation pane on the left, select your enterprise project from the Filter by enterprise project drop-down list. Then, WAF will display the related security data in the enterprise project on the page.
4. In the navigation pane on the left, click Policies.
5. Click the name of the target policy to go to the protection rule configuration page.

   Before configuring protection rules, ensure that the target protection policy has been applied to a domain name. A protection policy can be applied to multiple protected domain names, but a protected domain name can have only one protection policy.

6. Select CC Attack Protection, Bot Rule, or Precise Protection.
7. Click Reference Table Management in the upper left corner of the list.

   To add a reference table to a bot rule, click the Custom Protected Objects tab and click Reference Table Management in the upper left corner of the list.

8. On the Reference Table Management page, click Add Reference Table.
9. In the Add Reference Table dialog box, specify the parameters by referring to Table 1.
   Figure 1 Adding a reference table
   

   Table 1 Parameter description

   Parameter	Description	Example Value
   Name	Name of the reference table.	test
   Type	Type of the reference table to be detected. Path: A URL to be protected, excluding a domain name User Agent: A user agent of the scanner to be protected IP: An IP address of the visitor to be protected. NOTICE: In cloud mode, IPv6 protection is available only in the professional and enterprise editions. You can configure 0.0.0.0/0 and ::/0 IP address ranges to block all IPv4 and IPv6 traffic, respectively. Params: A request parameter to be protected Cookie: A small piece of data to identify web visitors Referer: A user-defined request resource For example, if the protected path is /admin/xxx and you do not want visitors to be able to access it from www.test.com, set Value to http://www.test.com. Header: A user-defined HTTP header. Request Body: data contained in an HTTP request. Response Code: status code returned to the request. Response Body: response message body Response Header: response header.	Path
   Value	Value of the corresponding Type. Wildcards are not allowed. You can add multiple values in batches and use line breaks as separators.	/buy/phone/
   Rule Description	Description of the rule.	-

10. Click OK. You can then view the added reference table in the reference table list.
    • After the preceding configurations are complete, you can view the added reference table in the reference table list.
    • To delete or modify a reference table, click Delete or Modify in the Operation column of the reference table.

Related Operations

• To modify a reference table, click Modify in the row containing the reference table.
• To delete a reference table, click Delete in the row containing the reference table.