Skip to main content

Web Access Control

Web access control restricts requests based on specific key values.

Configuration:

Rule Name and Description

Configure rule identification and purpose.

Triggering Condition:

  • Path: Define the request path to be matched
  • Key: Select one or more identifiers for access control, including IP, fingerprint, user agent, and cookie ID

Dynamic Action:

An advanced protection strategy designed to prevent attackers from predicting the security policy through repetitive attacks. When a request matches the triggering condition, the system triggers the action based on the configured triggering probability. Once triggered, the system randomly selects one action from the action set.

Parameters:

  • Triggering Probability: Define the probability for the system to trigger a protection action when a request matches the condition
  • Action Set: Include one or more actions: block, redirect, bypass, return HTML, or skip
  • Delay: Configure a delay (in seconds) before the action takes effect
  • Response Status Code: Define the HTTP status code to return when an action is triggered

Target Site:

Select the website to apply the rule.