You're almost there! Please answer a few more questions for access to the Applications content. Complete registration
Interested in joining? Complete your registration by providing Areas of Interest here. Register

Adding capability keys from oci cli

in Database 20 comments

Hi Team,

We would like to add the recommended OCI WAF capabilities shown below by creating a new protection rule without modifying any of the existing WAF rules.

Recommended capability keys:

921110, 921140, 920181 (HTTP request smuggling and header injection)
920220, 920240 (Invalid URL encoding)
9200014, 9200024 (Request header limits)
934110, 934120 (Server-side request forgery)
944150, 944151, 944152 (Technology-specific vulnerabilities, e.g., Log4Shell)

However, while creating the rule through the OCI Console, we are able to select only one capability key at a time. If we add another capability key, the previously selected key gets replaced.

Can all of these capability keys be configured together using the OCI CLI/API by updating the WAF policy JSON?

Tagged:

Howdy, Stranger!

Log In

To view full details, sign in.

Register

Don't have an account? Click here to get started!