Inspection & Blocking Settings

Blocking page, whitelist/blacklist, checks and body limits.

• What does a blocked user see?WAF-08-001
• Can I change the blocking page?WAF-08-002
• Why is the 418 status code returned by default on a block; can I change it?WAF-08-003
• Can I exempt certain IPs or requests from WAF inspection entirely (Whitelist Condition)?WAF-08-004
• Can I automatically block requests from IPs with a bad reputation (Blacklist Protection)?WAF-08-005
• What are the ready-made blocking page templates (Turkish, English, JSON)?WAF-08-006
• Can I show a blocking page based on the visitor's language?WAF-08-007
• Can I return a JSON blocking response instead of HTML for API clients?WAF-08-008
• Can I define different blocking pages depending on conditions (Conditional Blocking Pages)?WAF-08-009
• Which Smart Variables can I use on the blocking page (%UID, %SRCIP, %WAFSCORE, %WAFINFO …); is it safe to show attack details?WAF-08-010
• What do the Structure Checks and Argument Checks master switches do; what happens if I turn them off?WAF-08-011
• What does the URL Decoding setting affect; are query and form values decoded too?WAF-08-012
• What is Max. Allowed Arguments for; what happens if a page's learned argument list exceeds this number?WAF-08-013
• What happens to request bodies that exceed the Max. Body Size to Process(kB) limit or do not complete in time?WAF-08-014
• How is a body that exceeds the Max. Body Size to Log(kB) limit written to the log; should I raise this limit?WAF-08-015
• What is "Wait for body for a time" for?WAF-08-016
• With "Do not WAF static contents" on, under which condition is a request considered static?WAF-08-017
• How do I define a vService-specific IP blacklist (Frontend Blacklist) and its exclusions (Frontend Blacklist Exclusions)?WAF-08-018
• Is the traffic I whitelist logged at all; where does it appear on the dashboard?WAF-08-019
• Does "Add to Whitelist (vService)" in Event Logs exempt an IP from WAF inspection, or does it only add a blacklist exclusion?WAF-08-020
• What is the difference between the vService blacklist and the IP intelligence list?WAF-08-021
• What is the maximum value of Max. body size to process; how does it relate to the log limit?WAF-08-022