Switching Working Mode

Prerequisites

A protected website has been added. For details, see Adding a Website to EdgeSec.

Application Scenarios

• Enabled: In this mode, EdgeSec defends your website against attacks based on configured policies.
• Suspended: If a large number of normal requests are blocked, for example, status code 418 is frequently returned, then you can switch the mode to Suspended. In this mode, your website is not protected because EdgeSec only forwards requests. It does not scan for or log attacks. This mode is risky. You are advised to use the global protection whitelist rules to reduce false alarms.

Impact on the System

In the Suspended mode, your website is not protected because EdgeSec only forwards requests. It does not scan for attacks. To avoid normal requests from being blocked, configure global protection whitelist (formerly false alarm masking) rules, instead of using the Suspended mode.

Procedure

1. Log in to the management console.
2. Click in the upper left corner of the page and choose Security & Compliance > Edge Security.
3. In the navigation pane on the left, choose Dashboard under Security Protection.
4. In the navigation pane on the left, choose Website Settings.
5. In the row containing the target domain name, click in the Mode column and select a mode you want.
   Figure 1 Switching working mode
   
   • Enabled: In this mode, EdgeSec defends your website against attacks based on configured policies.
   • Suspended: If a large number of normal requests are blocked, for example, status code 418 is frequently returned, then you can switch the mode to Suspended. In this mode, your website is not protected because EdgeSec only forwards requests. It does not scan for or log attacks. This mode is risky. You are advised to use the global protection whitelist rules to reduce false alarms.

Other Operations

• Handling False Alarms