Last updated on: 2023-07-24 10:18:39.

WAF_Policy (object)

A Web Application Firewall Policy

Properties (* = required):

name	type(s)	default	allowed values	description
class*	string		“WAF_Policy”
disabledSignatures	array			Disable various attack signatures by ID.
enforcementMode	string		“blocking”, “transparent”	Overrides the enforcement mode setting of the WAF policy
file	string			The absolute file path for the ASM policy stored on the BIG-IP
ignoreChanges	boolean	false	true, false	If false (default), the system updates the policy in every AS3 declaration deployment. If true, AS3 creates the policy on first deployment, and leaves it untouched afterwards
label	string		“^[^x00-x1fx22#&*<>?x5b-x5d`x7f]*$”	Optional friendly name for this object. Allows 0-64 chars, excluding a few likely to cause trouble with string searching, JS, TCL, or HTML
policy				Reference to a WAF Policy,String value optionally in base64 or from URL or AS3 pointer
remark	string		“^[^x00-x1fx22x5cx7f]*$”	Arbitrary (brief) text pertaining to this object. Allows 0-64 chars, excluding only control characters, double-quote, and backslash. This is permissive enough that you should worry about XSS attacks
serverTechnologies	array			Define server technologies for the WAF Policy, such as Java Servlets or Apache Struts. Note: This is available in TMOS versions 13.0 and later.
url				The URL to pull the ASM policy from,Describes the URL to remote resource and optional parameters