Switching WAF Working Mode

You can change the working mode of WAF. WAF can work in Enabled or Suspended mode.

If you have enabled enterprise projects, ensure that you have all operation permissions for the project where your WAF instance locates. Then, you can select the enterprise project from the Enterprise Project drop-down list and switch WAF working mode for a specific domain name.

Prerequisites

You have connected the website you want to protect to WAF.

Application Scenarios

Enabled: In this mode, WAF defends your website against attacks based on configured policies.
Suspended: If a large number of normal requests are blocked, for example, status code 418 is frequently returned, then you can suspend WAF by enabling this mode. In this mode, your website is not protected because WAF only forwards requests. It does not scan for or log attacks. This mode is risky. You are advised to use the global protection whitelist rules to reduce false alarms.

Impact on the System

In Suspended mode, your website is not protected because WAF only forwards requests. It does not scan for attacks. To avoid normal requests from being blocked, configure global protection whitelist rules, instead of using the Suspended mode.

Switching WAF Working Mode

Log in to the management console.
Click in the upper left corner of the management console and select a region or project.
Click in the upper left corner and choose Web Application Firewall under Security & Compliance.
In the navigation pane on the left, choose Website Settings.
In the Operation column of the row containing the target domain name, select a protection mode. In the dialog box displayed, click Confirm.
- After you select Enabled, the Status of the domain name is Protected.
- After you select Suspended, the Status of the domain name is Unprotected.