Files
doc-exports/docs/waf/umn/CLASS.TXT.json
Li, Qiao aa799a8b98 waf umn 1115
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com>
Co-authored-by: Li, Qiao <qiaoli@huawei.com>
Co-committed-by: Li, Qiao <qiaoli@huawei.com>
2022-11-16 14:34:55 +00:00

524 lines
20 KiB
JSON

[
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"waf",
"title":"Introduction",
"uri":"waf_01_0064.html",
"doc_type":"usermanual",
"p_code":"",
"code":"1"
},
{
"desc":"Web Application Firewall (WAF) keeps web services stable and secure. It examines all HTTP and HTTPS requests to detect and block the following attacks: Structured Query L",
"product_code":"waf",
"title":"Web Application Firewall",
"uri":"waf_01_0045.html",
"doc_type":"usermanual",
"p_code":"1",
"code":"2"
},
{
"desc":"WAF examines web traffic from multiple dimensions to accurately identify malicious requests and filter attacks, reducing the risks of data being tampered with or stolen.C",
"product_code":"waf",
"title":"Product Advantages",
"uri":"waf_01_0065.html",
"doc_type":"usermanual",
"p_code":"1",
"code":"3"
},
{
"desc":"This section describes the application scenarios of WAF.Common protectionWAF helps users defend against common web attacks, such as command injection and sensitive file a",
"product_code":"waf",
"title":"Application Scenarios",
"uri":"waf_01_0046.html",
"doc_type":"usermanual",
"p_code":"1",
"code":"4"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"waf",
"title":"Accessing and Using WAF",
"uri":"waf_01_0047.html",
"doc_type":"usermanual",
"p_code":"1",
"code":"5"
},
{
"desc":"You can access WAF using the management console. If you have registered with the public cloud, you can directly log in to the management console.Cloud mode: On the homepa",
"product_code":"waf",
"title":"How to Access WAF",
"uri":"waf_01_0048.html",
"doc_type":"usermanual",
"p_code":"5",
"code":"6"
},
{
"desc":"The evolution of hacking techniques has caused frequent cybersecurity incidents against web servers. WAF provides comprehensive security protection for web services.You c",
"product_code":"waf",
"title":"How to Use WAF",
"uri":"waf_01_0049.html",
"doc_type":"usermanual",
"p_code":"5",
"code":"7"
},
{
"desc":"This section describes the relationship between WAF and other cloud services.Cloud Trace Service (CTS) provides records of operations on WAF. With CTS, you can query, aud",
"product_code":"waf",
"title":"Related Services",
"uri":"waf_01_0051.html",
"doc_type":"usermanual",
"p_code":"5",
"code":"8"
},
{
"desc":"The system provides two types of default permissions: user management and resource management. User management includes management of users, user groups, and user groups'",
"product_code":"waf",
"title":"User Permissions",
"uri":"waf_01_0052.html",
"doc_type":"usermanual",
"p_code":"5",
"code":"9"
},
{
"desc":"This section describes monitoring metrics reported by WAF to Cloud Eye as well as their namespaces and dimensions. You can use the management console or APIs provided by ",
"product_code":"waf",
"title":"Monitoring Metrics",
"uri":"waf_01_0092.html",
"doc_type":"usermanual",
"p_code":"",
"code":"10"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"waf",
"title":"Getting Started",
"uri":"waf_01_0070.html",
"doc_type":"usermanual",
"p_code":"",
"code":"11"
},
{
"desc":"Before using WAF, you need to connect your domain name to it and enable it for protection to take effect.Table 1 describes the procedure to use WAF.Procedure to use WAFSt",
"product_code":"waf",
"title":"Overview",
"uri":"waf_01_0071.html",
"doc_type":"usermanual",
"p_code":"11",
"code":"12"
},
{
"desc":"This section describes how to create a domain name and connect it to WAF. After connecting a domain name, WAF works as a reverse proxy between the client and server. The ",
"product_code":"waf",
"title":"Creating a Domain Name",
"uri":"waf_01_0002.html",
"doc_type":"usermanual",
"p_code":"11",
"code":"13"
},
{
"desc":"This section describes how to connect your domain to WAF on a local PC and then access the site to verify whether WAF works properly.Before testing WAF, ensure that the p",
"product_code":"waf",
"title":"Testing WAF",
"uri":"waf_01_0073.html",
"doc_type":"usermanual",
"p_code":"11",
"code":"14"
},
{
"desc":"This section describes how to connect a domain name to WAF so that website traffic passes through WAF.To ensure that WAF works properly, you are advised to test WAF by fo",
"product_code":"waf",
"title":"Connecting a Domain Name to WAF",
"uri":"waf_01_0079.html",
"doc_type":"usermanual",
"p_code":"11",
"code":"15"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"waf",
"title":"Certificate Management",
"uri":"waf_01_0078.html",
"doc_type":"usermanual",
"p_code":"",
"code":"16"
},
{
"desc":"This section describes how to upload a certificate.Login credentials have been obtained.In the upper part of the certificate list, click Quota details to view the certifi",
"product_code":"waf",
"title":"Uploading a Certificate",
"uri":"waf_01_0090.html",
"doc_type":"usermanual",
"p_code":"16",
"code":"17"
},
{
"desc":"This section describes how to delete an unused certificate.Login credentials have been obtained.The certificate to be deleted is not associated with any domain name.In th",
"product_code":"waf",
"title":"Deleting a Certificate",
"uri":"waf_01_0091.html",
"doc_type":"usermanual",
"p_code":"16",
"code":"18"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"waf",
"title":"Domain Management",
"uri":"waf_01_0067.html",
"doc_type":"usermanual",
"p_code":"",
"code":"19"
},
{
"desc":"This section describes how to view domain information and edit server information.Login credentials have been obtained.In the upper right corner of the list, query domain",
"product_code":"waf",
"title":"Viewing Basic Information",
"uri":"waf_01_0020.html",
"doc_type":"usermanual",
"p_code":"19",
"code":"20"
},
{
"desc":"The Transport Layer Security (TLS) protocol provides confidentiality and integrity of data sent between applications over the Internet. HTTPS is a network protocol constr",
"product_code":"waf",
"title":"Configuring the Minimum TLS Version and Cipher Suite",
"uri":"waf_01_0093.html",
"doc_type":"usermanual",
"p_code":"19",
"code":"21"
},
{
"desc":"This section describes how to enable WAF protection.The WAF engine does not run on your web server. Therefore, your web server performance will not be affected.After your",
"product_code":"waf",
"title":"Enabling WAF Protection",
"uri":"waf_01_0003.html",
"doc_type":"usermanual",
"p_code":"19",
"code":"22"
},
{
"desc":"This section describes how to disable WAF protection. In this mode, WAF only forwards requests, but does not detect them.Login credentials have been obtained.Mode for WAF",
"product_code":"waf",
"title":"Disabling WAF Protection",
"uri":"waf_01_0004.html",
"doc_type":"usermanual",
"p_code":"19",
"code":"23"
},
{
"desc":"This section describes how to set the bypassed mode whereby requests are sent directly to the backend server without passing through WAF.In special scenarios such as test",
"product_code":"waf",
"title":"Setting WAF Bypassed Mode",
"uri":"waf_01_0069.html",
"doc_type":"usermanual",
"p_code":"19",
"code":"24"
},
{
"desc":"If a visitor triggers block by WAF, the Default block page of WAF is returned by default. You can also configure Custom or Redirection for the block page to be returned a",
"product_code":"waf",
"title":"Modifying the Alarm Page",
"uri":"waf_01_0094.html",
"doc_type":"usermanual",
"p_code":"19",
"code":"25"
},
{
"desc":"This section describes how to delete a protected domain name from WAF.If the domain name to be deleted has been connected to WAF, re-resolve it with the DNS provider befo",
"product_code":"waf",
"title":"Deleting a Protected Domain Name",
"uri":"waf_01_0005.html",
"doc_type":"usermanual",
"p_code":"19",
"code":"26"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"waf",
"title":"Rule Configurations",
"uri":"waf_01_0007.html",
"doc_type":"usermanual",
"p_code":"",
"code":"27"
},
{
"desc":"This section describes how to enable basic web protection.Basic web protection defends against common web attacks, such as SQL injection, XSS attacks, remote buffer overf",
"product_code":"waf",
"title":"Enabling Basic Web Protection",
"uri":"waf_01_0008.html",
"doc_type":"usermanual",
"p_code":"27",
"code":"28"
},
{
"desc":"This section describes how to configure CC attack protection rules.With these rules, rate limiting policies are set based on the IP addresses, cookies, or Referer field t",
"product_code":"waf",
"title":"Configuring CC Attack Protection Rules",
"uri":"waf_01_0009.html",
"doc_type":"usermanual",
"p_code":"27",
"code":"29"
},
{
"desc":"This section describes how to configure precise protection rules.With these rules, WAF allows you to customize combinations of HTTP headers, cookies, URLs, request parame",
"product_code":"waf",
"title":"Configuring Precise Protection Rules",
"uri":"waf_01_0010.html",
"doc_type":"usermanual",
"p_code":"27",
"code":"30"
},
{
"desc":"This section describes how to configure blacklist or whitelist rules to block or allow specific IP addresses or address ranges.Blacklist and Whitelist only takes effect f",
"product_code":"waf",
"title":"Configuring Blacklist or Whitelist Rules",
"uri":"waf_01_0012.html",
"doc_type":"usermanual",
"p_code":"27",
"code":"31"
},
{
"desc":"This section describes how to configure web tamper protection (WTP) rules.You can configure these rules to prevent a static web page from being tampered with.WTP has the ",
"product_code":"waf",
"title":"Configuring Web Tamper Protection Rules",
"uri":"waf_01_0014.html",
"doc_type":"usermanual",
"p_code":"27",
"code":"32"
},
{
"desc":"This section describes how to configure false alarm masking rules.You can add false alarms to the whitelist and ignore certain event IDs (for example, skip XSS check for ",
"product_code":"waf",
"title":"Configuring False Alarm Masking Rules",
"uri":"waf_01_0016.html",
"doc_type":"usermanual",
"p_code":"27",
"code":"33"
},
{
"desc":"This section describes how to configure data masking rules. Data Masking prevents such data as usernames and passwords from being displayed in event logs.Login credential",
"product_code":"waf",
"title":"Configuring Data Masking Rules",
"uri":"waf_01_0017.html",
"doc_type":"usermanual",
"p_code":"27",
"code":"34"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"waf",
"title":"Policy Management",
"uri":"waf_01_0055.html",
"doc_type":"usermanual",
"p_code":"",
"code":"35"
},
{
"desc":"A policy is a combination of multiple rules, such as basic web protection, blacklist or whitelist, and precise protection rules. A policy can be applied to multiple domai",
"product_code":"waf",
"title":"Creating a Policy",
"uri":"waf_01_0074.html",
"doc_type":"usermanual",
"p_code":"35",
"code":"36"
},
{
"desc":"This section describes how to apply a policy to your domain names.Login credentials have been obtained.The domain name to be protected has been created.To view informatio",
"product_code":"waf",
"title":"Applying a Policy to Your Domain Names",
"uri":"waf_01_0075.html",
"doc_type":"usermanual",
"p_code":"35",
"code":"37"
},
{
"desc":"This section describes how to view event logs in a specified time (for example, today), including attack and request statistics, the number of attacks from the top 5 sour",
"product_code":"waf",
"title":"Dashboard",
"uri":"waf_01_0021.html",
"doc_type":"usermanual",
"p_code":"",
"code":"38"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"waf",
"title":"Event Management",
"uri":"waf_01_0018.html",
"doc_type":"usermanual",
"p_code":"",
"code":"39"
},
{
"desc":"This section describes how to mask false alarms and view event details if you find out that an event is misreported.Login credentials have been obtained.The event list co",
"product_code":"waf",
"title":"Handling False Alarms",
"uri":"waf_01_0024.html",
"doc_type":"usermanual",
"p_code":"39",
"code":"40"
},
{
"desc":"This section describes how to download events (logged and blocked events) data over the past five days. An event file is generated at 01:00:00 (UTC time) of the second da",
"product_code":"waf",
"title":"Downloading Events Data",
"uri":"waf_01_0077.html",
"doc_type":"usermanual",
"p_code":"39",
"code":"41"
},
{
"desc":"This section describes how to enable notification for attack logs. Once this function is enabled, WAF sends attack logs to users by email or SMS.Login credentials have be",
"product_code":"waf",
"title":"Enabling Alarm Notification",
"uri":"waf_01_0019.html",
"doc_type":"usermanual",
"p_code":"39",
"code":"42"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"waf",
"title":"FAQs",
"uri":"waf_01_0022.html",
"doc_type":"usermanual",
"p_code":"",
"code":"43"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"waf",
"title":"General",
"uri":"waf_01_0025.html",
"doc_type":"usermanual",
"p_code":"43",
"code":"44"
},
{
"desc":"WAF is deployed on the cloud and is not coupled with services on a web server. Therefore, WAF supports all OSs.",
"product_code":"waf",
"title":"Which OSs Does WAF Support?",
"uri":"waf_01_0026.html",
"doc_type":"usermanual",
"p_code":"44",
"code":"45"
},
{
"desc":"WAF is deployed on the cloud and is not coupled with services on a web server. Therefore, WAF supports all web service frameworks.",
"product_code":"waf",
"title":"Which Web Service Frameworks Does WAF Support?",
"uri":"waf_01_0027.html",
"doc_type":"usermanual",
"p_code":"44",
"code":"46"
},
{
"desc":"The protection policies supported by WAF are described below.Basic Web ProtectionWAF can defend against common web attacks, such as SQL injection, XSS, webshells, and Tro",
"product_code":"waf",
"title":"What Protection Policies Does WAF Support?",
"uri":"waf_01_0028.html",
"doc_type":"usermanual",
"p_code":"44",
"code":"47"
},
{
"desc":"No. WAF cannot obtain the private IP address of the user site because Virtual Private Cloud (VPC) is isolated.",
"product_code":"waf",
"title":"Can WAF Protect a Private IP Address?",
"uri":"waf_01_0029.html",
"doc_type":"usermanual",
"p_code":"44",
"code":"48"
},
{
"desc":"WAF provides protection for seven layers, namely, the physical layer, data link layer, network layer, transport layer, session layer, presentation layer, and application ",
"product_code":"waf",
"title":"Which Layer Does WAF Provides Protection At?",
"uri":"waf_01_0030.html",
"doc_type":"usermanual",
"p_code":"44",
"code":"49"
},
{
"desc":"Yes. You simply need to configure HTTPS as the frontend protocol and allow WAF to host your certificate. Then, WAF protects your HTTPS service.",
"product_code":"waf",
"title":"Can WAF Protect HTTPS Services?",
"uri":"waf_01_0037.html",
"doc_type":"usermanual",
"p_code":"44",
"code":"50"
},
{
"desc":"During the configuration of a CC attack protection rule, if IP addresses cannot identify users precisely, for example, when many users share an egress IP address, use Coo",
"product_code":"waf",
"title":"When Is Cookie Used to Identify Users?",
"uri":"waf_01_0036.html",
"doc_type":"usermanual",
"p_code":"44",
"code":"51"
},
{
"desc":"When a visitor accesses a protected domain name, WAF automatically inserts the CLOUDWAFSESID and CLOUDWAFSESTIME fields into the cookie of the access request. The fields ",
"product_code":"waf",
"title":"Why Do Cookies Contain the CLOUDWAFSESID and CLOUDWAFSESTIME Fields After a Domain is Connected to WAF?",
"uri":"waf_01_0095.html",
"doc_type":"usermanual",
"p_code":"44",
"code":"52"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"waf",
"title":"Operation-related",
"uri":"waf_01_0063.html",
"doc_type":"usermanual",
"p_code":"43",
"code":"53"
},
{
"desc":"If DNS is Unconfigured, domain name resolution fails, that is, the domain name is not connected to WAF. In this case, perform the following steps to connect the domain na",
"product_code":"waf",
"title":"What Should I Do If the DNS Status Is Unconfigured?",
"uri":"waf_01_0056.html",
"doc_type":"usermanual",
"p_code":"53",
"code":"54"
},
{
"desc":"Generally, a proxy such as CDN, WAF, and AAD is deployed between the client and server. Web visitors cannot directly access the server. For example, web visitorCDN/WAF/AA",
"product_code":"waf",
"title":"How Do I Obtain the Real IP Address of a Web Visitor After WAF Is Enabled?",
"uri":"waf_01_0062.html",
"doc_type":"usermanual",
"p_code":"53",
"code":"55"
},
{
"desc":"If an error such as 500 Internal Server Error, 502 Bad Gateway, or 504 Gateway Timeout occurs after your web server connects to WAF, use the following methods to locate t",
"product_code":"waf",
"title":"How Do I Troubleshoot 500/502/504 Errors?",
"uri":"waf_01_0066.html",
"doc_type":"usermanual",
"p_code":"53",
"code":"56"
},
{
"desc":"If the certificate provided by the certificate authority is not found in the built-in trust store on your platform and the certificate chain does not have a certificate a",
"product_code":"waf",
"title":"How Do I Fix an Incomplete Certificate Chain?",
"uri":"waf_01_0082.html",
"doc_type":"usermanual",
"p_code":"53",
"code":"57"
},
{
"desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"product_code":"waf",
"title":"Change History",
"uri":"waf_01_0023.html",
"doc_type":"usermanual",
"p_code":"",
"code":"58"
}
]