Configuring a Traffic Identifier for a Known Attack Source

Updated on 2025-03-04 GMT+08:00

View PDF

EdgeSec allows you to configure traffic identifiers by session or user tag to block possibly malicious requests from known attack sources based on Cookie or Params.

Prerequisites

A protected website has been added. For details, see Adding a Website to EdgeSec.

Constraints

Before enabling Cookie- or Params-based known attack source rules, configure a session or user tag for the corresponding website domain name.

Procedure

Log in to the management console.
Click in the upper left corner of the page and choose Content Delivery & Edge Computing > CDN and Security.
In the navigation pane on the left, choose Edge Security > Website Settings. The Website Settings page is displayed.
In the Domain Name column, click the domain name of the website to go to the basic information page.

In the Traffic Identifier area, click

next to Session Tag, or User Tag to configure a traffic identifier by referring to Table 1.

Figure 1 Traffic Identifier

**Table 1** Traffic identifier parameters
Identifier	Description	Example Value
Session Tag	This tag is used to block possibly malicious requests based on the cookie attributes of an attack source. Configure this parameter to block requests based on cookie attributes.	jssessionid
User Tag	This tag is used to block possibly malicious requests based on the Params attribute of an attack source. Configure this parameter to block requests based on the Params attributes.	name