Xcitium SIEM

• Introduction To Comodo CWatch Web Security
  • Purchase A License
  • License Types
  • Login To The Admin Console
  • Add Websites
• The Main Interface
• The Dashboard
• Website Data And Settings
  • Website Overview
  • Security Scans
    • Website Scans
    • Website Files Security Scans
      • Malware Scan Settings
        • Automatic Configuration
        • Manual Configuration
      • Run A Scan And View Results
      • Notifications, Malware Removal And Scheduled Scans
    • Vulnerability Scans
      • CMS Vulnerability Scans
      • OWASP Top 10 Vulnerability Scans
  • Content Delivery Network
    • Activate CDN For A Website
    • CDN Settings
    • View CDN Metrics
  • Firewall
    • WAF Statistics
    • WAF Events
    • Configure WAF Policies
    • Manage Custom Firewall Rules
  • SSL Configuration
  • DNS Configuration
  • Add Trust Seal To Your Websites
  • Back Up Your Website
    • Purchase A Backup License
    • Backup Settings
    • On-Demand Backup
    • View Backup Records And File Statistics
    • Restore And Download Website Files
    • Delete Backups
• View And Upgrade Licenses For Domains
• Manage Your Profile
• Get Support
• About Comodo Security Solutions

WAF Events

• The events page shows all traffic intercepted by a firewall rule.

• Event details include the source IP of the attempt, the rule that caught the attempt, and the action taken on the traffic.

• You can also choose how to deal with future incidents of the same type from the same source.

• Open the cWatch dashboard

• Select the target website from the menu at top-left

• Click the 'Firewall' tab

• Open the 'Events' tab

• Rule Name - The firewall rule that intercepted the access request

• Action - The activity of the access request on the website

• IP - The address of the source of the access request

• Country - The country from which the access request came

• Date - The date and time of the access request

• Choose action - Specify how to deal with future traffic from the same IP address.
  

• Allow - All traffic from the IP is permitted. This includes legitimate traffic, bots, malicious traffic etc.

• Block - No traffic is allowed from the IP. An error message is shown to users.

The action you choose above will start a wizard to create a custom firewall rule. Custom firewall rules require a 'Premium' license for the site.

Click 'Apply' to save your choice. See Manage Custom Firewall Rules for help on custom firewall rules.