Files
doc-exports/docs/waf/umn/ALL_META.TXT.json
Li, Qiao aa799a8b98 waf umn 1115
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com>
Co-authored-by: Li, Qiao <qiaoli@huawei.com>
Co-committed-by: Li, Qiao <qiaoli@huawei.com>
2022-11-16 14:34:55 +00:00

582 lines
24 KiB
JSON

[
{
"uri":"waf_01_0064.html",
"product_code":"waf",
"code":"1",
"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"doc_type":"usermanual",
"kw":"Introduction",
"title":"Introduction",
"githuburl":""
},
{
"uri":"waf_01_0045.html",
"product_code":"waf",
"code":"2",
"des":"Web Application Firewall (WAF) keeps web services stable and secure. It examines all HTTP and HTTPS requests to detect and block the following attacks: Structured Query L",
"doc_type":"usermanual",
"kw":"Web Application Firewall (WAF),keeps web services stable and secure,Challenge Collapsar (CC) attacks",
"title":"Web Application Firewall",
"githuburl":""
},
{
"uri":"waf_01_0065.html",
"product_code":"waf",
"code":"3",
"des":"WAF examines web traffic from multiple dimensions to accurately identify malicious requests and filter attacks, reducing the risks of data being tampered with or stolen.C",
"doc_type":"usermanual",
"kw":"Comprehensive protection,Technology leadership,Flexible configuration,Reliability,Product Advantages",
"title":"Product Advantages",
"githuburl":""
},
{
"uri":"waf_01_0046.html",
"product_code":"waf",
"code":"4",
"des":"This section describes the application scenarios of WAF.Common protectionWAF helps users defend against common web attacks, such as command injection and sensitive file a",
"doc_type":"usermanual",
"kw":"Application Scenarios,Introduction,User Guide",
"title":"Application Scenarios",
"githuburl":""
},
{
"uri":"waf_01_0047.html",
"product_code":"waf",
"code":"5",
"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"doc_type":"usermanual",
"kw":"Accessing and Using WAF",
"title":"Accessing and Using WAF",
"githuburl":""
},
{
"uri":"waf_01_0048.html",
"product_code":"waf",
"code":"6",
"des":"You can access WAF using the management console. If you have registered with the public cloud, you can directly log in to the management console.Cloud mode: On the homepa",
"doc_type":"usermanual",
"kw":"How to Access WAF,Accessing and Using WAF,User Guide",
"title":"How to Access WAF",
"githuburl":""
},
{
"uri":"waf_01_0049.html",
"product_code":"waf",
"code":"7",
"des":"The evolution of hacking techniques has caused frequent cybersecurity incidents against web servers. WAF provides comprehensive security protection for web services.You c",
"doc_type":"usermanual",
"kw":"How to Use WAF,Accessing and Using WAF,User Guide",
"title":"How to Use WAF",
"githuburl":""
},
{
"uri":"waf_01_0051.html",
"product_code":"waf",
"code":"8",
"des":"This section describes the relationship between WAF and other cloud services.Cloud Trace Service (CTS) provides records of operations on WAF. With CTS, you can query, aud",
"doc_type":"usermanual",
"kw":"Related Services,Accessing and Using WAF,User Guide",
"title":"Related Services",
"githuburl":""
},
{
"uri":"waf_01_0052.html",
"product_code":"waf",
"code":"9",
"des":"The system provides two types of default permissions: user management and resource management. User management includes management of users, user groups, and user groups'",
"doc_type":"usermanual",
"kw":"user management,resource management,User Permissions,Accessing and Using WAF,User Guide",
"title":"User Permissions",
"githuburl":""
},
{
"uri":"waf_01_0092.html",
"product_code":"waf",
"code":"10",
"des":"This section describes monitoring metrics reported by WAF to Cloud Eye as well as their namespaces and dimensions. You can use the management console or APIs provided by ",
"doc_type":"usermanual",
"kw":"Monitoring Metrics,User Guide",
"title":"Monitoring Metrics",
"githuburl":""
},
{
"uri":"waf_01_0070.html",
"product_code":"waf",
"code":"11",
"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"doc_type":"usermanual",
"kw":"Getting Started",
"title":"Getting Started",
"githuburl":""
},
{
"uri":"waf_01_0071.html",
"product_code":"waf",
"code":"12",
"des":"Before using WAF, you need to connect your domain name to it and enable it for protection to take effect.Table 1 describes the procedure to use WAF.Procedure to use WAFSt",
"doc_type":"usermanual",
"kw":"connect your domain name,Overview,Getting Started,User Guide",
"title":"Overview",
"githuburl":""
},
{
"uri":"waf_01_0002.html",
"product_code":"waf",
"code":"13",
"des":"This section describes how to create a domain name and connect it to WAF. After connecting a domain name, WAF works as a reverse proxy between the client and server. The ",
"doc_type":"usermanual",
"kw":"create a domain name and connect it,Domain Configuration Principle,Creating a Domain Name,Getting St",
"title":"Creating a Domain Name",
"githuburl":""
},
{
"uri":"waf_01_0073.html",
"product_code":"waf",
"code":"14",
"des":"This section describes how to connect your domain to WAF on a local PC and then access the site to verify whether WAF works properly.Before testing WAF, ensure that the p",
"doc_type":"usermanual",
"kw":"Testing WAF,Getting Started,User Guide",
"title":"Testing WAF",
"githuburl":""
},
{
"uri":"waf_01_0079.html",
"product_code":"waf",
"code":"15",
"des":"This section describes how to connect a domain name to WAF so that website traffic passes through WAF.To ensure that WAF works properly, you are advised to test WAF by fo",
"doc_type":"usermanual",
"kw":"connect a domain name to WAF,Connecting a Domain Name to WAF,Getting Started,User Guide",
"title":"Connecting a Domain Name to WAF",
"githuburl":""
},
{
"uri":"waf_01_0078.html",
"product_code":"waf",
"code":"16",
"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"doc_type":"usermanual",
"kw":"Certificate Management",
"title":"Certificate Management",
"githuburl":""
},
{
"uri":"waf_01_0090.html",
"product_code":"waf",
"code":"17",
"des":"This section describes how to upload a certificate.Login credentials have been obtained.In the upper part of the certificate list, click Quota details to view the certifi",
"doc_type":"usermanual",
"kw":"Uploading a Certificate,Certificate Management,User Guide",
"title":"Uploading a Certificate",
"githuburl":""
},
{
"uri":"waf_01_0091.html",
"product_code":"waf",
"code":"18",
"des":"This section describes how to delete an unused certificate.Login credentials have been obtained.The certificate to be deleted is not associated with any domain name.In th",
"doc_type":"usermanual",
"kw":"Deleting a Certificate,Certificate Management,User Guide",
"title":"Deleting a Certificate",
"githuburl":""
},
{
"uri":"waf_01_0067.html",
"product_code":"waf",
"code":"19",
"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"doc_type":"usermanual",
"kw":"Domain Management",
"title":"Domain Management",
"githuburl":""
},
{
"uri":"waf_01_0020.html",
"product_code":"waf",
"code":"20",
"des":"This section describes how to view domain information and edit server information.Login credentials have been obtained.In the upper right corner of the list, query domain",
"doc_type":"usermanual",
"kw":"Viewing Basic Information,Domain Management,User Guide",
"title":"Viewing Basic Information",
"githuburl":""
},
{
"uri":"waf_01_0093.html",
"product_code":"waf",
"code":"21",
"des":"The Transport Layer Security (TLS) protocol provides confidentiality and integrity of data sent between applications over the Internet. HTTPS is a network protocol constr",
"doc_type":"usermanual",
"kw":"Configuring the Minimum TLS Version and Cipher Suite,Domain Management,User Guide",
"title":"Configuring the Minimum TLS Version and Cipher Suite",
"githuburl":""
},
{
"uri":"waf_01_0003.html",
"product_code":"waf",
"code":"22",
"des":"This section describes how to enable WAF protection.The WAF engine does not run on your web server. Therefore, your web server performance will not be affected.After your",
"doc_type":"usermanual",
"kw":"enable WAF protection,Enabling WAF Protection,Domain Management,User Guide",
"title":"Enabling WAF Protection",
"githuburl":""
},
{
"uri":"waf_01_0004.html",
"product_code":"waf",
"code":"23",
"des":"This section describes how to disable WAF protection. In this mode, WAF only forwards requests, but does not detect them.Login credentials have been obtained.Mode for WAF",
"doc_type":"usermanual",
"kw":"Disabling WAF Protection,Domain Management,User Guide",
"title":"Disabling WAF Protection",
"githuburl":""
},
{
"uri":"waf_01_0069.html",
"product_code":"waf",
"code":"24",
"des":"This section describes how to set the bypassed mode whereby requests are sent directly to the backend server without passing through WAF.In special scenarios such as test",
"doc_type":"usermanual",
"kw":"Setting WAF Bypassed Mode,Domain Management,User Guide",
"title":"Setting WAF Bypassed Mode",
"githuburl":""
},
{
"uri":"waf_01_0094.html",
"product_code":"waf",
"code":"25",
"des":"If a visitor triggers block by WAF, the Default block page of WAF is returned by default. You can also configure Custom or Redirection for the block page to be returned a",
"doc_type":"usermanual",
"kw":"Modifying the Alarm Page,Domain Management,User Guide",
"title":"Modifying the Alarm Page",
"githuburl":""
},
{
"uri":"waf_01_0005.html",
"product_code":"waf",
"code":"26",
"des":"This section describes how to delete a protected domain name from WAF.If the domain name to be deleted has been connected to WAF, re-resolve it with the DNS provider befo",
"doc_type":"usermanual",
"kw":"Deleting a Protected Domain Name,Domain Management,User Guide",
"title":"Deleting a Protected Domain Name",
"githuburl":""
},
{
"uri":"waf_01_0007.html",
"product_code":"waf",
"code":"27",
"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"doc_type":"usermanual",
"kw":"Rule Configurations",
"title":"Rule Configurations",
"githuburl":""
},
{
"uri":"waf_01_0008.html",
"product_code":"waf",
"code":"28",
"des":"This section describes how to enable basic web protection.Basic web protection defends against common web attacks, such as SQL injection, XSS attacks, remote buffer overf",
"doc_type":"usermanual",
"kw":"basic web protection,Enabling Basic Web Protection,Rule Configurations,User Guide",
"title":"Enabling Basic Web Protection",
"githuburl":""
},
{
"uri":"waf_01_0009.html",
"product_code":"waf",
"code":"29",
"des":"This section describes how to configure CC attack protection rules.With these rules, rate limiting policies are set based on the IP addresses, cookies, or Referer field t",
"doc_type":"usermanual",
"kw":"CC attacks,Configuring CC Attack Protection Rules,Rule Configurations,User Guide",
"title":"Configuring CC Attack Protection Rules",
"githuburl":""
},
{
"uri":"waf_01_0010.html",
"product_code":"waf",
"code":"30",
"des":"This section describes how to configure precise protection rules.With these rules, WAF allows you to customize combinations of HTTP headers, cookies, URLs, request parame",
"doc_type":"usermanual",
"kw":"precise protection,Configuring Precise Protection Rules,Rule Configurations,User Guide",
"title":"Configuring Precise Protection Rules",
"githuburl":""
},
{
"uri":"waf_01_0012.html",
"product_code":"waf",
"code":"31",
"des":"This section describes how to configure blacklist or whitelist rules to block or allow specific IP addresses or address ranges.Blacklist and Whitelist only takes effect f",
"doc_type":"usermanual",
"kw":"blacklist or whitelist,Blacklist and Whitelist,Configuring Blacklist or Whitelist Rules,Rule Configu",
"title":"Configuring Blacklist or Whitelist Rules",
"githuburl":""
},
{
"uri":"waf_01_0014.html",
"product_code":"waf",
"code":"32",
"des":"This section describes how to configure web tamper protection (WTP) rules.You can configure these rules to prevent a static web page from being tampered with.WTP has the ",
"doc_type":"usermanual",
"kw":"web tamper protection (WTP),Configuring Web Tamper Protection Rules,Rule Configurations,User Guide",
"title":"Configuring Web Tamper Protection Rules",
"githuburl":""
},
{
"uri":"waf_01_0016.html",
"product_code":"waf",
"code":"33",
"des":"This section describes how to configure false alarm masking rules.You can add false alarms to the whitelist and ignore certain event IDs (for example, skip XSS check for ",
"doc_type":"usermanual",
"kw":"false alarm masking,Configuring False Alarm Masking Rules,Rule Configurations,User Guide",
"title":"Configuring False Alarm Masking Rules",
"githuburl":""
},
{
"uri":"waf_01_0017.html",
"product_code":"waf",
"code":"34",
"des":"This section describes how to configure data masking rules. Data Masking prevents such data as usernames and passwords from being displayed in event logs.Login credential",
"doc_type":"usermanual",
"kw":"Data Masking,Configuring Data Masking Rules,Rule Configurations,User Guide",
"title":"Configuring Data Masking Rules",
"githuburl":""
},
{
"uri":"waf_01_0055.html",
"product_code":"waf",
"code":"35",
"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"doc_type":"usermanual",
"kw":"Policy Management",
"title":"Policy Management",
"githuburl":""
},
{
"uri":"waf_01_0074.html",
"product_code":"waf",
"code":"36",
"des":"A policy is a combination of multiple rules, such as basic web protection, blacklist or whitelist, and precise protection rules. A policy can be applied to multiple domai",
"doc_type":"usermanual",
"kw":"Creating a Policy,Policy Management,User Guide",
"title":"Creating a Policy",
"githuburl":""
},
{
"uri":"waf_01_0075.html",
"product_code":"waf",
"code":"37",
"des":"This section describes how to apply a policy to your domain names.Login credentials have been obtained.The domain name to be protected has been created.To view informatio",
"doc_type":"usermanual",
"kw":"Applying a Policy to Your Domain Names,Policy Management,User Guide",
"title":"Applying a Policy to Your Domain Names",
"githuburl":""
},
{
"uri":"waf_01_0021.html",
"product_code":"waf",
"code":"38",
"des":"This section describes how to view event logs in a specified time (for example, today), including attack and request statistics, the number of attacks from the top 5 sour",
"doc_type":"usermanual",
"kw":"view event logs,Dashboard,User Guide",
"title":"Dashboard",
"githuburl":""
},
{
"uri":"waf_01_0018.html",
"product_code":"waf",
"code":"39",
"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"doc_type":"usermanual",
"kw":"Event Management",
"title":"Event Management",
"githuburl":""
},
{
"uri":"waf_01_0024.html",
"product_code":"waf",
"code":"40",
"des":"This section describes how to mask false alarms and view event details if you find out that an event is misreported.Login credentials have been obtained.The event list co",
"doc_type":"usermanual",
"kw":"false alarms,Handling False Alarms,Event Management,User Guide",
"title":"Handling False Alarms",
"githuburl":""
},
{
"uri":"waf_01_0077.html",
"product_code":"waf",
"code":"41",
"des":"This section describes how to download events (logged and blocked events) data over the past five days. An event file is generated at 01:00:00 (UTC time) of the second da",
"doc_type":"usermanual",
"kw":"Downloading Events Data,Event Management,User Guide",
"title":"Downloading Events Data",
"githuburl":""
},
{
"uri":"waf_01_0019.html",
"product_code":"waf",
"code":"42",
"des":"This section describes how to enable notification for attack logs. Once this function is enabled, WAF sends attack logs to users by email or SMS.Login credentials have be",
"doc_type":"usermanual",
"kw":"Enabling Alarm Notification,Event Management,User Guide",
"title":"Enabling Alarm Notification",
"githuburl":""
},
{
"uri":"waf_01_0022.html",
"product_code":"waf",
"code":"43",
"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"doc_type":"usermanual",
"kw":"FAQs",
"title":"FAQs",
"githuburl":""
},
{
"uri":"waf_01_0025.html",
"product_code":"waf",
"code":"44",
"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"doc_type":"usermanual",
"kw":"General",
"title":"General",
"githuburl":""
},
{
"uri":"waf_01_0026.html",
"product_code":"waf",
"code":"45",
"des":"WAF is deployed on the cloud and is not coupled with services on a web server. Therefore, WAF supports all OSs.",
"doc_type":"usermanual",
"kw":"Which OSs Does WAF Support?,General,User Guide",
"title":"Which OSs Does WAF Support?",
"githuburl":""
},
{
"uri":"waf_01_0027.html",
"product_code":"waf",
"code":"46",
"des":"WAF is deployed on the cloud and is not coupled with services on a web server. Therefore, WAF supports all web service frameworks.",
"doc_type":"usermanual",
"kw":"Which Web Service Frameworks Does WAF Support?,General,User Guide",
"title":"Which Web Service Frameworks Does WAF Support?",
"githuburl":""
},
{
"uri":"waf_01_0028.html",
"product_code":"waf",
"code":"47",
"des":"The protection policies supported by WAF are described below.Basic Web ProtectionWAF can defend against common web attacks, such as SQL injection, XSS, webshells, and Tro",
"doc_type":"usermanual",
"kw":"What Protection Policies Does WAF Support?,General,User Guide",
"title":"What Protection Policies Does WAF Support?",
"githuburl":""
},
{
"uri":"waf_01_0029.html",
"product_code":"waf",
"code":"48",
"des":"No. WAF cannot obtain the private IP address of the user site because Virtual Private Cloud (VPC) is isolated.",
"doc_type":"usermanual",
"kw":"Can WAF Protect a Private IP Address?,General,User Guide",
"title":"Can WAF Protect a Private IP Address?",
"githuburl":""
},
{
"uri":"waf_01_0030.html",
"product_code":"waf",
"code":"49",
"des":"WAF provides protection for seven layers, namely, the physical layer, data link layer, network layer, transport layer, session layer, presentation layer, and application ",
"doc_type":"usermanual",
"kw":"Which Layer Does WAF Provides Protection At?,General,User Guide",
"title":"Which Layer Does WAF Provides Protection At?",
"githuburl":""
},
{
"uri":"waf_01_0037.html",
"product_code":"waf",
"code":"50",
"des":"Yes. You simply need to configure HTTPS as the frontend protocol and allow WAF to host your certificate. Then, WAF protects your HTTPS service.",
"doc_type":"usermanual",
"kw":"Can WAF Protect HTTPS Services?,General,User Guide",
"title":"Can WAF Protect HTTPS Services?",
"githuburl":""
},
{
"uri":"waf_01_0036.html",
"product_code":"waf",
"code":"51",
"des":"During the configuration of a CC attack protection rule, if IP addresses cannot identify users precisely, for example, when many users share an egress IP address, use Coo",
"doc_type":"usermanual",
"kw":"When Is Cookie Used to Identify Users?,General,User Guide",
"title":"When Is Cookie Used to Identify Users?",
"githuburl":""
},
{
"uri":"waf_01_0095.html",
"product_code":"waf",
"code":"52",
"des":"When a visitor accesses a protected domain name, WAF automatically inserts the CLOUDWAFSESID and CLOUDWAFSESTIME fields into the cookie of the access request. The fields ",
"doc_type":"usermanual",
"kw":"Why Do Cookies Contain the CLOUDWAFSESID and CLOUDWAFSESTIME Fields After a Domain is Connected to W",
"title":"Why Do Cookies Contain the CLOUDWAFSESID and CLOUDWAFSESTIME Fields After a Domain is Connected to WAF?",
"githuburl":""
},
{
"uri":"waf_01_0063.html",
"product_code":"waf",
"code":"53",
"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"doc_type":"usermanual",
"kw":"Operation-related",
"title":"Operation-related",
"githuburl":""
},
{
"uri":"waf_01_0056.html",
"product_code":"waf",
"code":"54",
"des":"If DNS is Unconfigured, domain name resolution fails, that is, the domain name is not connected to WAF. In this case, perform the following steps to connect the domain na",
"doc_type":"usermanual",
"kw":"What Should I Do If the DNS Status Is Unconfigured?,Operation-related,User Guide",
"title":"What Should I Do If the DNS Status Is Unconfigured?",
"githuburl":""
},
{
"uri":"waf_01_0062.html",
"product_code":"waf",
"code":"55",
"des":"Generally, a proxy such as CDN, WAF, and AAD is deployed between the client and server. Web visitors cannot directly access the server. For example, web visitorCDN/WAF/AA",
"doc_type":"usermanual",
"kw":"How Do I Obtain the Real IP Address of a Web Visitor After WAF Is Enabled?,Operation-related,User Gu",
"title":"How Do I Obtain the Real IP Address of a Web Visitor After WAF Is Enabled?",
"githuburl":""
},
{
"uri":"waf_01_0066.html",
"product_code":"waf",
"code":"56",
"des":"If an error such as 500 Internal Server Error, 502 Bad Gateway, or 504 Gateway Timeout occurs after your web server connects to WAF, use the following methods to locate t",
"doc_type":"usermanual",
"kw":"How Do I Troubleshoot 500/502/504 Errors?,Operation-related,User Guide",
"title":"How Do I Troubleshoot 500/502/504 Errors?",
"githuburl":""
},
{
"uri":"waf_01_0082.html",
"product_code":"waf",
"code":"57",
"des":"If the certificate provided by the certificate authority is not found in the built-in trust store on your platform and the certificate chain does not have a certificate a",
"doc_type":"usermanual",
"kw":"How Do I Fix an Incomplete Certificate Chain?,Operation-related,User Guide",
"title":"How Do I Fix an Incomplete Certificate Chain?",
"githuburl":""
},
{
"uri":"waf_01_0023.html",
"product_code":"waf",
"code":"58",
"des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.",
"doc_type":"usermanual",
"kw":"Change History,User Guide",
"title":"Change History",
"githuburl":""
}
]