Policies

Configure policies

Directives

External references

Violations

Policy parameter reference

Allowed methods

Attack signatures

Brute force attack preventions

Cookie enforcement

Data guard

Deny and Allow IP lists

Disallowed file type extensions

Do-nothing

Evasion techniques

Geolocation

GraphQL protection

gRPC protection

HTTP compliance

IP address lists

IP intelligence

JWT protection

Override rules

Server technology signatures

Time-based signature staging

Threat campaigns

User-defined HTTP headers

User-defined URLs and parameters

XFF trusted headers

XML and JSON content