waf url-access-parameter
Use this command to add URL access parameter rules. It should be referred in an URL access rule.
To use this command, your administrator account’s access control profile must have either w or rw permission to the wafgrp area. For details, see Permissions.
Syntax
config waf url-access-parameter
edit waf url-access-parameter
config waf url-access-parameter-list
edit <index>
set argument-name-type {plain | regular}
set argument-name <string>
set optional {enable | disable}
set type-checked {enable | disable}
set argument-type {data-type | regular-expression | custom-data-type}
set data-type <data_type>
set argument-expression <string>
set custom-data-type <datasource>
next
end
next
end
|
"<url-access-parameter-rule_name>"
|
Enter the name of a new or existing rule. The maximum length is 63 characters.
To display the list of existing rules, enter:
edit ?
|
No default. |
|
argument-name-type {plain | regular}
|
Select whether the parameter name field must contain
either:
|
plain
|
|
argument-name <string>
|
Depending on your selection in Type, enter either:
- The literal name that the HTTP request must contain in order to match the rule.
- A regular expression.
To create and test a regular expression, click the >> (test) icon. This opens the Regular Expression Validator window where you can fine-tune the expression. For details, see "Regular expression syntax" on page 1.
|
No default. |
|
optional {enable | disable}
|
Specifies whether the parameter must appear in the request for the URL Access rule to match. When enabled, the rule matches regardless of parameter presence, but still validates the parameter if it appears.
|
disable
|
|
type-checked {enable | disable}
|
If type-checked is enabled, parameter value must match the argument specified.
|
disable
|
|
argument-type {data-type | regular-expression | custom-data-type}
|
The argument-type option is available if type-checked is enabled.
Select the type of the parameter value:
-
data-type
-
regular-expression
-
custom-data-type
|
data-type
|
|
data-type <data_type>
|
If data-type is selected as the argument-type, select the specific data type. |
No default.
|
|
argument-expression <string>
|
If regular-expression is selected as the argument-type, enter the regular expression.
|
No default.
|
|
custom-data-type <datasource>
|
If custom-data-type is selected as the argument-type, select the custom data type.
|
No default.
|