What are Dynamic Paths, Excluded Paths and Dynamic Path Exclusions for?

Q: What are Dynamic Paths, Excluded Paths and Dynamic Path Exclusions for?

On the Analyze Page Types screen, the three are the lists of the Advanced Settings window and they narrow the page tree of the analysis. Dynamic Paths are the glob patterns to be treated as dynamic (such as /urun/* or /api/**/*); all the addresses the pattern covers are gathered in a single page type and, when applied, are written as a glob page type (if Rule creating mode is Page independent, no page type is written). Suggest globs, Dynamic[path] (*) and Dynamic[everything] (**) write to this list: Dynamic[path] adds the path/* and path/*/ patterns for the selected level, Dynamic[everything] the path/**/* pattern. Excluded Paths are the addresses or patterns to be removed from the tree entirely; they do not produce rules, and Exclude from Analysis adds to this list. Dynamic Path Exclusions are the addresses that will preserve their own page type even if they fall within the scope of a dynamic pattern; when Dynamic[path] and Dynamic[everything] are applied, the unselected items at the same level are added here automatically, and Add to Dynamic Path Exlusions adds them manually. The lists can also be edited manually in the Advanced settings window and saved with Accept; every change is written to the analysis record immediately and changes Current Page Count, and the lists are emptied with Reset.

Short answer

On the Analyze Page Types screen, the three are the lists of the Advanced Settings window and they narrow the page tree of the analysis. Dynamic Paths are the glob patterns to be treated as dynamic (such as /urun/* or /api/**/*); all the addresses the pattern covers are gathered in a single page type and, when applied, are written as a glob page type (if Rule Creating Mode is Page independent, no page type is written). Suggest Globs, Dynamic[path] (*) and Dynamic[everything] (**) write to this list: Dynamic[path] adds the path/* and path/*/ patterns for the selected level, Dynamic[everything] the path/**/* pattern. Excluded Paths are the addresses or patterns to be removed from the tree entirely; they do not produce rules, and Exclude from Analysis adds to this list. Dynamic Path Exclusions are the addresses that will preserve their own page type even if they fall within the scope of a dynamic pattern; when Dynamic[path] and Dynamic[everything] are applied, the unselected items at the same level are added here automatically, and Add to Dynamic Path Exlusions adds them manually. The lists can also be edited manually in the Advanced settings window and saved with Accept; every change is written to the analysis record immediately and changes Current Page Count, and the lists are emptied with Reset.

The Three Lists

List	What it does	How it is filled
Dynamic Paths	Gathers the addresses that match the pattern in a single page type; becomes a glob page type when applied (except Page independent)	Suggest Globs → Accept Selected Globs, Dynamic[path] (), Dynamic[everything] (*), manually
Excluded Paths	Removes the addresses from the tree; does not produce a page type	Exclude from Analysis, manually
Dynamic Path Exclusions	Preserves the own page type of an address that matches the pattern	Add to Dynamic Path Exlusions; Dynamic[path] and Dynamic[everything] add the unselected items

Example: under /urun/, there are /urun/1001, /urun/1002 … and /urun/sepet. When 1001 and 1002 are selected and Dynamic[path] (*) is applied, /urun/* and /urun/*/ are added to Dynamic paths, and the unselected /urun/sepet to Dynamic Path Exclusions; when applied (in the modes other than Page independent and if thresholds such as Min requests are met), a /urun/* glob page type and a /urun/sepet exact path page type are written.
The Excluded Paths list is also used in checking the analysis result: before applying, the paths that come out in the analysis result are reviewed on the Analyze Page Types screen; only the paths for which a WAF rule will be created should remain in the list. It is recommended that unknown or suspicious paths be excluded from the analysis by adding them to this list with Exclude from Analysis.
If Dynamic[path] or Dynamic[everything] is applied without any item being selected, all the items in the open directory are covered and no exclusion is added.
Remove Globs (including sub globs) removes the patterns under the selected rows from Dynamic paths.
* covers a single level, ** all the sublevels; glob syntax: How are glob patterns (*, **) written; how is the path test tool used?
Use of the screen: Can I review and edit the analysis result before applying it (Analyze Page Types screen)?

Common Misconceptions

"The addresses in Excluded paths are left free." They do not enter the analysis and do not get their own page types; at run time, they are inspected by Any Paths or by a matching glob page type. If Comprehensive or Data based was applied with Create New Rules, Any paths may reject the method or the data of these requests.
"Dynamic path exclusions deletes the pattern." The pattern stays; only the excluded address becomes a separate page type.
"Reset removes only the last added pattern." Reset empties the three lists and all the edits; for a single step, Undo is used.

How it is done in the documentation

What are Dynamic Paths, Excluded Paths and Dynamic Path Exclusions for? ​

The Three Lists ​

Common Misconceptions ​

What are Dynamic Paths, Excluded Paths and Dynamic Path Exclusions for?

The Three Lists

Common Misconceptions