SOCaaP

• Introduction
  • Logging-in To The SOCaaP Console
• Dashboard Overview
  • Summary
  • Alerts,Incidents And Website Vulnerabilities
  • Customer Health
• SOCaaP Alerts/Escalations
  • Log-in To The Admin Console
  • The Home Screen
  • Service Summary
  • Incidents Overview
    • Incidents
    • Threat Summary
  • Log Collection Summary
  • Threat Communication Graph
  • Tickets
  • Reports
  • Notification Settings
  • Integrate Your Office 365 Account With SOCaaP
• SOCaaP XDR
  • Log-in To The Admin Console
  • The Main Interface
  • Eveny Query
    • Configure Event Queries
  • Report Generation
  • Administration
    • Event Collection
    • Phantom Settings
    • Manage Users
  • Appendix 1 – Field Groups And Event Items Description
  • Appendix 2 –SOCaaP Supported Logs
• SOCaaP Web Protection
  • Add Websites
  • The Main Interface
  • The Dashboard
  • Website Data And Settings
    • Website Overview
    • Security Scans
      • Website Scans
      • Website Files Security Scans
        • Malware Scan Settings
          • Automatic Configuration
          • Manual Configuration
        • Run A Scan And View Results
        • Notifications, Malware Removal And Scheduled Scans
      • Vulnerability Scans
        • CMS Vulnerability Scans
        • OWASP Top 10 Vulnerability Scans
    • Content Delivery Network
      • Activate CDN For A Website
      • CDN Settings
      • View CDN Metrics
    • Firewall
      • WAF Statistics
      • WAF Events
      • Configure WAF Policies
      • Manage Custom Firewall Rules
    • SSL Configuration
    • DNS Configuration
    • Add Trust Seal To Your Websites
    • Back Up Your Website
      • Backup Settings
      • On-Demand Backup
      • View Backup Records And File Statistics
      • Restore And Download Website Files
      • Delete Backups
  • Manage Your Profile
• Sensor Installation
  • Requirements
  • (Option 1) Create Installation Media
  • (Option 2) Deploy Virtual Machine Environment
    • Create A New Virtual Machine
    • Configure Memory Size
    • Configure Hard Disk
    • Configure Hard Disk File Type
    • Configure Storage On Physical Hard Disk
    • Configure Size Of Virtual Hard Disk
    • Configure Network Settings
    • Select VM Startup Disk
  • Sensor Installation Steps
  • Sensor Configuration Steps
    • Login To The Web Portal
    • User Settings
    • Configure Network
    • Configure Timezone
    • Key Activation
    • (Optional) Valkyrie Key Verdict
    • (Optional) Forward Log
• Frequently Asked Questions
• About Xcitium Security Solutions

WAF Statistics

The statistics page shows attacks identified and blocked by the web application firewall (WAF). This includes the top 5 attack types and top 5 attack sources.

You can also choose the action taken on future threats from the same source. SOCaaP Web Protection updates your WAF rules accordingly.

View WAF statistics

• Open the SOCaaP Web Protection dashboard

• Select the target website from the menu at top-left

• Click the 'Firewall' tab

• Open the 'Statistics' tab if not already open

• Select the period for which you want to view statistics from the slider at top-right:

Place your mouse anywhere on the chart to see the number of attacks blocked at that point in time. Click and drag the line to zoom in on a time range. Click 'Reset Zoom' to return to the original view.

• Top 5 countries - The 5 countries from which the highest number of attacks originated.

• Choose action - Specify how to deal with future traffic from the country:

• Allow - All traffic from the country is permitted. This includes legitimate traffic, bots, malicious traffic etc.

• Block - No traffic is allowed from the country. An error message is shown to users.

The action you choose above will create a custom rule for traffic from the country. Custom firewall rules require a 'Premium' license for the site.

Click 'Apply' to save your choice. See Manage Custom Firewall Rules for more details on managing custom firewall rules.