Version: v6

KB:1005

How to configure multiple security profiles for complex application ?

Problem Statement

The client wants the Application to behave for a set of user in different way or client wants to configure different type of Application behind the WAF.

Solution

The client can achieve the above requirement by configuring different profile.

Example :We have DEFAULT Profiles,in which we configured that application will not handle the POST request using Web Policy

kb-1005

After Policy is applied,WAF will automatically block the POST request.

kb-1005

And now we are configuring the Profile for another set of users and in which we have configured that it will handle POST request.

kb-1005

After configuring the profile, WAF is allowing the POST request for the same application.

kb-1005

In the same way, the client can configure the Profile for different application types (i.e. websites, web socket).