Change History

Released On	Description
2024-01-30	This issue is the ninth official release. Added the following content: Forwarding Custom Header Fields
2023-10-30	This issue is the eighth official release. Adjusted the document structure. Added the following content: Enabling the HTTP/2 Protocol Configuring a Timeout for Connections Between WAF and a Website Server Configuring a Traffic Identifier for a Known Attack Source Monitoring Managing IP Address Blacklist and Whitelist Groups Service Request/Specification Viewing Product Details Modified the following content: Website Settings WAF Operation Guide Configuring PCI DSS/3DS Certification Check and Configuring the Minimum TLS Version and Cipher Suite Configuring a CC Attack Protection Rule Dashboard Events
2023-05-17	This issue is the seventh official release. Edition Differences: Updated some screenshots.
2023-03-30	This issue is the sixth official release. Modified the following topics: What Is WAF?: Added the cloud service principle diagram. About Billing: Added billing information about the dedicated WAF. Added the following content: Edition Differences Personal Data Protection Mechanism Ports Supported by WAF Auditing Added the following FAQs: What Are the Differences Between WAF Forwarding and Nginx Forwarding? Does WAF Block Customized POST Requests? Can WAF Defend Against the Apache Struts2 Remote Code Execution Vulnerability (CVE-2021-31805)? Why Does the Vulnerability Scanning Tool Report Disabled Non-standard Ports for My WAF-Protected Website? How Do I Configure My Server to Allow Only Requests from WAF? Why Do Cookies Contain the HWWAFSESID or HWWAFSESTIME field? How Do I Configure WAF If a Reverse Proxy Server Is Deployed for My Website? What Can I Do If One of Ports on an Origin Server Does Not Require WAF Protection? Do I Need to Import the Certificates That Have Been Uploaded to ELB to WAF? Why Cannot I Select a Client Protocol When Adding a Domain Name? How Can I Forward Requests Directly to the Origin Server Without Passing Through WAF? Why Is My Domain Name or IP Address Inaccessible? Why Does WAF Block Normal Requests as Invalid Requests? What Is the Connection Timeout Duration of WAF? Can I Manually Set the Timeout Duration? How Do I Solve the Problem of Excessive Redirection Times? Why Does the Website Login Page Continuously Refreshed After a Domain Name Is Connected to WAF? Why Does the Requested Page Respond Slowly After the HTTP Forwarding Policy Is Configured? What Are the Differences Between Rate Limit and Allowable Frequency in a CC Rule? Why Is the Requested Page Unable to Load After JavaScript Anti-Crawler Is Enabled? Which of the WAF Protection Rules Support the Log-Only Protective Action? Why Does the Page Fail to Be Refreshed After WTP Is Enabled? What Are the Differences Between Blacklist/Whitelist Rules and Precise Protection Rules on Blocking Access Requests from Specified IP Addresses? What Do I Do If a Scanner, such as AppScan, Detects that the Cookie Is Missing Secure or HttpOnly? What Does "Mismatch" for "Protective Action" Mean in the Event List? How Long Can WAF Protection Logs Be Stored? Why Is the Traffic Statistics on WAF Inconsistent with That on the Origin Server?
2022-10-30	This issue is the fifth official release. Added some FAQs and the following topics: Connecting a Website to WAF (Dedicated Mode) Uploading a Certificate Deleting a Certificate Viewing Certificate Information Enabling LTS for WAF Logging Managing Dedicated WAF Engines Optimized the following topics: Functions Dashboard Viewing Protection Event Logs
2022-04-12	This issue is the fourth official release. Added Can WAF Protect Websites Accessed Through HSTS or NTLM Authentication?
2021-11-30	This issue is the third official release. Added About Billing.
2021-06-30	This issue is the second official release. Added WAF Permissions Management.
2020-11-06	This issue is the first official release.