---
title: Rule Management
slug: ps/help/en_us/vwaf/ag/rule-management
docTags: 
createdAt: 2026-08-02T10:05:40.285Z
---

## Purpose

On the Rule Management tab you can monitor which rules vWAF currently uses as a result of [Vulnerability Management](docId\:uTS1tkuQWn1WzPNg14M9m).

:::hint{type="info"}
Future versions will also show the rules created as a result of [Malware detection](docId\:Nxw4gbhx701ylkpcoTcSa) here.
:::

## Opening

To access Rule Management:

1. In the navigation area, select the application for which you want to manage external services rules.
2. Activate the External Services | Rule Management tab.

::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/CrFrd4U_DRvXHy_rIiRPP_guid-4feb244f-7e74-46ad-81ea-dc921b561cfb-outputlow688x400.png" position="flex-start" size="69" width="688" height="400" initialPath="guid-4feb244f-7e74-46ad-81ea-dc921b561cfb-output_low_688x400.png" githubPath="ag/vwaf_integrated/guid-4feb244f-7e74-46ad-81ea-dc921b561cfb-output_low_688x400.png" showCaption="false" indent="1"}

## Information displayed

| Column      | Meaning                                                                                                                                                                                                                      |
| ----------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Category    | Shows which category of attack may be carried out via the identified vulnerability. The category name is provided by the external service used.                                                                              |
| Provider    | Shows who provides the mitigation rule. Mitigation rules may either be provided by the report file that you’ve imported from your external service provider, or by vWAF [Baseline Protection](docId\:pUuki7UyD96FuXtxys4dG). |
| Description | Contains a more detailed description of the particular attack vector. The text is provided by the external service used.                                                                                                     |
| Pattern     | Exact pattern that vWAF looks for in your web application. If this pattern matches with a request, vWAF applies the configured mitigation rules for this request.                                                            |