Firewall Rule - Match Triggered

#1

Hi All,

I’m having some difficulties in discovery what firewall rule have been used in “Firewall Event Log”.
Someone please can help me to understand how can I find the rule used in “match triggered” section? Actually I can see only this filter: 0df84ba4bb6a4515ae2210dccb06a02f

Thanks in advance

0 Likes

#2

As shown in the “Type” field, it says Firewall Rule, so that’s one of the rules you set up.

0 Likes

#3

Thanks for replying sdayman.

If I understood well, if another Firewall Rule was triggered (EG: URI Path), the event details will show “URI Path” instead “User Agent”?

I’m asking it because until now, I didn’t see any log different from “User Agent”.

Here’s all my rules…

0 Likes

#4

That’s where it gets confusing. When I look through my Firewall Events Log, I can tell which of my rules they violated.

But it does list the Filter used…though I can’t get the Rule ID from the Dashboard. Maybe the API can get you a list of your Firewall Rules along with their Rule ID.

1 Like

#5

Looking at the screenshots alone I assume it was “NotGETPOST” based on the description and the event details.

1 Like

#6

Totally missed that. I read the rule as NoGetPost (which should have triggered alarm bells in my head).

0 Likes

closed #7

This topic was automatically closed after 30 days. New replies are no longer allowed.

0 Likes