Environment Level WAF logging/blocking
Problem to solve
Please reference the MVC Issue
Intended users
Please reference the MVC Issue
Further details
Please reference the MVC Issue
Proposal
- Allow users to override the global setting and set the WAF to logging or blocking mode on a per-environment basis
- The current method of using environmental variables to configure the WAF functionality on a per-environment basis will continue to work and will override the UI setting
Experience:
Environment level settings
Details
Main states
Edge cases & addt'l states
Permissions and Security
Users must be a Maintainer or Owner on the project to have access to the new Protection button on the Operations -> Environments page.
Documentation
- Documentation will be updated to describe how to switch the WAF between logging and blocking modes on a per-environment basis
What is the type of buyer?
Links / references
Edited by Sam White