Help Center/ SecMaster/ User Guide/ Risk Prevention/ Policy Management/ Overview
Updated on 2024-06-07 GMT+08:00
View PDF

Overview

You can use SecMaster to manage and maintain tasks across accounts with ease, making it simple to implement protection of different services, including WAF, CFW, VPC security groups and IAM.

In the policy management module, you can view all policies centrally, manage policies for seven defense lines manually, and query manual and automatic block records quickly.

Limitations and Constraints

  • Currently, the emergency policies include only the blacklist policies of CFW/WAF/VPC security groups/IAM.
  • A maximum of 300 emergency policies that support block aging can be added for a single workspace you have. A maximum of 1,300 emergency policies can be added for a single workspace you have. Limits on blocked objects at a time are as follows:
    • When a policy needs to be delivered to CFW or WAF, each time a maximum of 50 IP addresses can be added for each account.
    • When a policy needs to be delivered to CFW, each time a maximum of 20 IP addresses can be added as blocked objects within 1 minute for each account.
    • When a policy needs to be delivered to IAM, each time a maximum of 50 IAM users can be added as blocked objects for each account.
  • If an IP address or IP address range or an IAM user is added to the blacklist, CFW/WAF/VPC/IAM will block requests from that IP address without checking whether the requests are malicious.
Parent topic: Policy Management