Table of Contents
Advertisement
Adding or Editing a Rule Chain
To add or edit a rule chain:
1
On the Web Application Firewall > Rules page, click Add Rule Chain to add a new rule chain.
To edit an existing rule chain, click its Edit Rule Chain icon
The New Rule Chain screen or the screen for the existing rule chain displays. Both screens have the same
configurable fields in the Rule Chain section.
2
On the New Rule Chain page, type a descriptive name for the rule chain in the Name field.
3
Select a threat level from the Severity drop-down list. You can select HIGH, MEDIUM, or LOW.
4
Select Prevent, Detect Only, or Disabled from the Action drop-down list.
•
Prevent – Block traffic that matches the rule and log it.
•
Detect – Allow the traffic, but log it.
•
Disabled – The rule chain should not take effect.
The Disabled option allows you to temporarily deactivate a rule chain without deleting its configuration.
5
In the Description field, type a short description of what the rule chain matches or other information.
6
Select a category for this threat type from the Category drop-down list. This field is for informational
purposes, and does not change the way the rule chain is applied.
7
Under Counter Settings, to enable tracking the rate at which the rule chain is being matched and to
configure rate limiting, select Enable Hit Counters. Additional fields are displayed.
8
In the Max Allowed Hits field, enter the number of matches for this rule chain that must occur before
the selected action is triggered.
9
In the Reset Hit Counter Period field, enter the number of seconds allowed to reach the Max Allowed
Hits number. If Max Allowed Hits is not reached within this time period, the selected action is not
triggered and the hits counter is reset to zero.
under Configure.
Dell SonicWALL Secure Mobile Access 8.5
Administration Guide
298
Advertisement
Chapters
Table of Contents
Troubleshooting
