View Policy of all your Web Applications/APIs

A summary of all CloudGuard WAF practices is available under Policy->Policy in the form of rules view.

Rules table

Asset/Zone

The asset or zone (dynamic group of assets) the security practice protects

Practices

The CloudGuard WAF practice configured to protect the asset/zone.

Mode

The mode can be show:

• Detect - The practice is configured to log events without blocking traffic.

• Prevent - The practice is configured to block incoming traffic upon detection of a malicious attack.

• Disabled

• Mixed - The practice may be set to "Detect" or "Prevent" but a mode of at least one sub-practice (e.g. CloudGuard WAF IPS, API Schema Validation, etc.) is set to override the main mode.

Exceptions

Shows configured exclusions configured for the practice.

Triggers

Shows the Log Trigger object/s configured for the practice.

Enforcement

Shows the Agents Profile/s that enforce this rule.

Agent View

The agents table reflects the policy number used by each agent, and can be used to monitor policy updates and any errors.

Tab view

When selecting a rule, the bottom tabs will show the data of the asset/zone the rule protects.

• The "Attribute" tab shows a summary of the asset/zone data.

• The other tabs are the same tabs shown when editing the asset/zone object and can be used to edit the asset and practice configuration without being required to go to either the Assets or Zones.