Creating an Argument Rule
This section discusses creation of an Argument Rule.
In the
New Argument Rule
screen, do the following.- Click theRule Enabledtoggle button to enable or disable the rule. The Rule is enabled by default.
- Enter aRule IDthat is unique for this group.
- Enter the ruleName.
- Enter aDescriptionfor the rule.
- Select one of the following:
- Use Policy Mode
- Detection
- EnforcementFor more information on choosing a mode, see Selecting a WAF Policy Mode.
- Select a Paranoia mode. For more information, see What are the Paranoia Modes available in WAF? What are the considerations for choosing the mode? in FAQ section. This defines the Paranoia mode (set by the overall policy) in which this rule gets executed.
- Define theMatch Elementsas shown below:
- Enter theValue Max Lengthto define the maximum length of the match value.
- Select aValueto identify the expression that describes the expected value. This value can be aPatternorString Group/Key. For more information on String Groups, see String Groups Support.
- EnableArguments Case Sensitive, if required. This ensures that the match value has the same case as specified in the match value pattern.
- ClickAdd Match Elementand define the match elements as shown below:
- In the fieldName, select the variable collection. This is a dictionary of all parsed parts of the incoming request. If the match must happen on a POST argument, chooseARGS. The drop-down menu gives all available options.
- Select the criteria to match from theCriteriadrop-down menu. Criteria is the method for locating Match Element. Equals indicates that the providedSub Elementmust be equal to the corresponding request parameter.You can choose other methods. For example, the regular expression match interprets theSub Elementas a regular expression.
- Enter aSub Element. This is the name of the element you are matching on. If the match should be on a parameterfoo, enterfooin theSub Elementfield.
- Select theExcludedcheck box, if you need to exclude the element mentioned underNameandSub Element. This negates the match.
- SelectCase Sensitivecheck box for a case-sensitive match.
- ClickSave.