This document describes how Cloud Native Gateway implements security protection by integrating with WAF through object protection. After object protection is enabled, all requests to the gateway are protected by default.
Note:
WAF object access is supported only by the WAF Enterprise edition and higher editions.
Prerequisites
The tse-global-configuration plugin and tse-cloud-waf plugin are upgraded to the latest versions before WAF is enabled.
2. Click Cloud Native Gateway in the left sidebar, click the instance name to go to the instance details page, and then click Plugin Management on the left.
3. Select the System Plugins tab to check whether the plugins are updated to the latest version.
Operation Steps
1. Log in to the WAF console, and choose Access Management > Object Access in the left sidebar. 2. In the object access list, select the Cloud Native Gateway instance that requires object access and enable the WAF switch.
3. Log in to the Cloud Native Gateway console, click Cloud Native Gateway in the left sidebar, and then click the instance name to go to the instance details page. 4. Select Security Protection in the left sidebar, go to the WAF Protection tab, and check that object protection is enabled.
5. Enter http://<gateway domain name or IP address>/?test=alert(123) in the address box of the browser to visit the gateway. The browser displays the blocking page, indicating that WAF protection is normal.