Updating Protection Settings for an Edge Policy

Use Web Application Firewall to update protection settings for Edge policies.

• Console
• CLI
• API

• 1. Open the navigation menu and click Identity & Security. Under Web Application Firewall, click Policies.
  2. On the Policies page, select the compartment that contains the policy.
  3. (Optional) Filter the listed policies by name, state (status), policy type (Edge policy), or creation date.
  4. Click the name of the Edge policy you want to update rule settings for. 
  5. On the policy details page, under Edge policy, click Protection rules.
  6. Click the Settings tab.
  7. Click Edit rule settings.
  8. In the Edit rule settings dialog box, enter the following information:
     • Block action: The action taken on malicious requests blocked by WAF.
     • Block response code: Provides information indicating why the request was blocked.
     • Max number of arguments: The maximum number of arguments allowed in the request. The recommended setting is 255.
     • Max length of argument: The maximum argument length allowed in the request. The recommended setting is 400.
     • Max total argument length: The maximum argument length for all arguments in the request. The recommended setting is 64000.
     • Max response size (kilobytes): The maximum response size. The recommended setting is 1024.
     • Recommendations period: The period in days to analyze for recommended actions.
     • Allowed HTTP methods: The list of allowed HTTP protocol methods.
     • Enable response inspect: Select to enable response inspection.
  9. Click Save changes.

  The accepted protection rules are added to the list to be published. For more information, see WAF Protection Rules.

• This task is not available in the CLI.

• Run the UpdateProtectionSettings operation to update protection settings.