- WAF Release Notes
- User Guide
- Product Introduction
- Purchase Guide
- Getting Started
- Operation Guide
- Best Practice
- FAQS
- Security Advisory
- Command Execution Vulnerability in Exchange Server
- SQL Injection Vulnerability in Yonyou GRP-U8
- XXE Vulnerability in Apache Cocoon (CVE-2020-11991)
- Arbitrary Code Execution Vulnerability in WordPress File Manager
- Jenkins Security Advisory for September
- Remote Code Execution Vulnerabilities in Apache Struts 2 (CVE-2019-0230 and CVE-2019-0233)
- SQL Injection Vulnerability in Apache SkyWalking (CVE-2020-13921)
- WAF Policy
- Glossary
- WAF Release Notes
- User Guide
- Product Introduction
- Purchase Guide
- Getting Started
- Operation Guide
- Best Practice
- FAQS
- Security Advisory
- Command Execution Vulnerability in Exchange Server
- SQL Injection Vulnerability in Yonyou GRP-U8
- XXE Vulnerability in Apache Cocoon (CVE-2020-11991)
- Arbitrary Code Execution Vulnerability in WordPress File Manager
- Jenkins Security Advisory for September
- Remote Code Execution Vulnerabilities in Apache Struts 2 (CVE-2019-0230 and CVE-2019-0233)
- SQL Injection Vulnerability in Apache SkyWalking (CVE-2020-13921)
- WAF Policy
- Glossary
This document describes how to get started with Web Application Firewall (WAF).
1. WAF Basic Knowledge
2. WAF Billing Modes
Tencent Cloud WAF offers SaaS WAF and CLB WAF services. The two types have basically the same billable items, billing modes, and pricing. For more information, please see Purchase Guide.
You can choose the WAF service based on your business connection method.
3. Getting Started
3.1 Knowing about WAF features
Tencent Cloud WAF offers SaaS WAF and CLB WAF services, which have different main features. For more information, please see Product Category.
3.2 Purchasing WAF
You can purchase the service in the WAF purchase page.
3.3 Connecting WAF
Tencent Cloud SaaS WAF and CLB WAF are different in connecting domain names. For more information, please see Getting Started.
3.4 Practices
WAF can be applied in certain scenarios together with other Tencent Cloud products for your business security protection.
- Using WAF and Anti-DDoS Pro Together
- WAF Security Protection for API Gateway
- Applying for and Using Free HTTPS Certificates
4. Overview of Console Features
| Feature | Reference |
|---|---|
| Check access logs of WAF protection domain names | Access Log |
| Query web attack logs with filters and download results | Attack Log |
| Enable smart mode CC protection or CC rules settings | CC Protection Settings |
| Prevent abnormal displaying caused by page tampering | Tamper Protection |
| Customize policies directly targeting various attacks | Custom Rules |
| Replace sensitive information returned in web pages to prevent information leak | Leak Protection |
| Block accesses from regions in or outside the Chinese mainland | Region Blocking |
| Distinguish between friendly and malicious bot programs and apply different traffic management policies accordingly | Bot Overview |
| Detect and capture known and unknown web threats | AI Engine |
| Query the status of, and set allowlist/blocklist for the source IPs accessed WAF protection domain names | IP Management |
5. FAQs
Can non-Tencent Cloud servers use Web Application Firewall (WAF)?
Does WAF support HTTPS protection?
Can the real server IP added to WAF be a private IP in Tencent Cloud CVM?
How do I connect a domain name?
Does WAF support connecting wildcard domain names?
6. Feedback and Suggestion
If you have any doubts or suggestions when using Tencent Cloud WAF, you can submit your feedback through the following channels. Dedicated personnel will contact you to solve your problems.
- To report product documentation issues such as link, content, or API errors, you can click Send Feedback at the bottom of the document.
- For product issues, please submit a ticket for assistance.
Yes
No
Was this page helpful?