Configuring Blacklist or Whitelist Rules

Prerequisites

• Login credentials have been obtained.
• The domain name to be protected has been created.

Procedure

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click Service List at the top of the page. Choose Security > Web Application Firewall. In the navigation pane on the left, choose Domains.
4. Locate the row that contains the desired domain name. In the Operation column, click Configure Policy.
5. In the Blacklist and Whitelist area, specify Status. After the configuration completes, in the upper right corner of the Protection Status list, click Save. In the displayed dialog box, click Yes to save the settings. If you do not want to save the settings, click Cancel.
6. Click Customize Rule. On the displayed Blacklist and Whitelist page, click Add Rule in the upper left corner.
   

   If you do not click Save after changing Status in Step 5, a Warning dialog box is displayed when you click Customize Rule.

   • Click Yes to cancel the previous settings.
   • Click No and then Save to save the settings.

7. In the displayed dialog box, specify the parameters by referring to Table 1.

   Table 1 Rule parameters

   Parameter	Description	Example Value
   IP Address or Range	IP address: IP address to be added to the blacklist or whitelist IP address range: IP address and subnet mask defining a network segment	XXX.XXX.1.1 XXX.XXX.1.0/24
   Protective Action	If IP Address or Range is to be added to a whitelist, set this parameter to Whitelist. If IP Address or Range is to be added to a blacklist, set this parameter to Blacklist.	Blacklist

8. Click OK.
   • To modify the added rule, click Modify in the row containing the target rule.
   • To delete the added rule, click Delete in the row containing the target rule.