Behavior Rules

Overview

The Behavior rule is a feature of Haltdos WAF that that allows application owners to identify the malicious user intent with the help of the behavioral engine.

Behavior Rules

How to Use

1. Follow the links: WAF > Listener > Security Profiles > Rules > Behavior Rules

2. Click on Add Rule and set relevant parameters described in the table below.

3. Click on Save.

PARAMETERS	ACCEPTED VALUES	DEFAULT
Rule Name	String	Blank
Rule Message	String	Blank
Rule Priority	Integer	0
Evaluation Phase	Drop-down	Request
Rule Action	Drop-down	None
Variable Name	String	Blank
Condition	Drop-down	Max Value
Condition Value	Regex	Blank

Behavior Rule Condition

Description

Rule Name

Specify a rule name to identify the rule which is to be created. The rule name takes alpha-numeric input.

Rule Message

Specify a rule message containing a detailed description to identify the rule which is to be created.

Rule Priority

Specify the priority for the rule for execution when matched with the request.

Evaluation Phase

Select the evaluation phase for the rule i.e. Request or Response.

Rule Action

Specify the action to be taken for the request matched i.e. No Action, Drop, Record, Tarpit, Temporary Blacklist, Send Challenge.

Variable Name

Specify the name of the variable for the rule.

Condition

Select the condition from the drop-down.

Condition Value

Specify the condition value for the rule.