Preconditions (Selectors)
In vWAF you can create the security configuration in detail on the level of individual paths (see Editing Paths). The validity of the rules stored for these paths can be restricted using preconditions (see Application Mapping, Paths, Preconditions).
Overview
The following selectors are available for defining preconditions:
- Argument Selector Permits path-specific handling dependent on specific arguments in an URL.
- Client IP Selector Specifies IP sectors to which path-specific rules are to apply.
- Content Type Selector Permits path-specific handling dependent on the content type specified in a request (Internet Media Type, MIME Type).
- Content Length Selector Permits path-specific handling dependent on the content length of a request.
- Host Name Selector Permits specific path handling based on the specified host names.
- HTTP Method Selector Permits path-specific handling dependent on the method specified in a request (GET, HEAD, POST).
- The HTTP Protocol Selector Ensures that vWAF only includes a ruleset when the ruleset is carried out via a specific version of the HTTP protocol.
- The Request Selector Ensures that vWAF only considers a ruleset for a path if a specific request line has been sent.
- SSL Selector Ensures that vWAF only considers a ruleset for a path when a request is made via an SSL connection, or only when it’s made via a non-SSL connection.
- Time Selector Allows path-specific rules to be handled based on the day of the week and time.
- Url Selector Can further restrict the URLs of a path.