Help Center/ Edge Security/ User Guide/ Security Protection/ Connecting a Domain Name to EdgeSec/ Configuring a Traffic Identifier for a Known Attack Source
Updated on 2024-10-31 GMT+08:00

Configuring a Traffic Identifier for a Known Attack Source

EdgeSec allows you to configure traffic identifiers by session or user tag to block possibly malicious requests from known attack sources based on Cookie or Params.

Prerequisites

A protected website has been added. For details, see Adding a Website to EdgeSec.

Constraints

  • Before enabling Cookie- or Params-based known attack source rules, configure a session or user tag for the corresponding website domain name.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the page and choose Content Delivery & Edge Computing > CDN and Security.
  3. In the navigation pane on the left, choose Edge Security > Website Settings. The Website Settings page is displayed.
  4. In the Domain Name column, click the domain name of the website to go to the basic information page.
  5. In the Traffic Identifier area, click next to Session Tag, or User Tag to configure a traffic identifier by referring to Table 1.

    Figure 1 Traffic Identifier
    Table 1 Traffic identifier parameters

    Identifier

    Description

    Example Value

    Session Tag

    This tag is used to block possibly malicious requests based on the cookie attributes of an attack source. Configure this parameter to block requests based on cookie attributes.

    jssessionid

    User Tag

    This tag is used to block possibly malicious requests based on the Params attribute of an attack source. Configure this parameter to block requests based on the Params attributes.

    name

  6. Click Confirm.