Inspection scope: Headers

Feature Inspection scope: Headers Description Enable header inspection during rule evaluation. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Bot Control: Per-path override precedence

Feature Bot Control: Per-path override precedence Description How per-path overrides apply before/after default limits. How it works AegisWAF applies this capability inside the Bot Control module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Bot Control Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Bot Control: Per-path threshold wildcard matching

Feature Bot Control: Per-path threshold wildcard matching Description How wildcards (* and ?) match request paths for per-path limits. How it works AegisWAF applies this capability inside the Bot Control module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Bot Control Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

REST Progressive Enforcement: Block-at

Feature REST Progressive Enforcement: Block-at Description Threshold where REST requests are blocked. How it works AegisWAF applies this capability inside the API Shield module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → API Shield Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

REST Progressive Enforcement: Rate-limit-at

Feature REST Progressive Enforcement: Rate-limit-at Description Threshold where REST requests begin being rate-limited. How it works AegisWAF applies this capability inside the API Shield module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → API Shield Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

REST Progressive Enforcement: Challenge-at

Feature REST Progressive Enforcement: Challenge-at Description Threshold where REST requests begin receiving challenges. How it works AegisWAF applies this capability inside the API Shield module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → API Shield Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Attack Story: Top detected types/rules (24h)

Feature Attack Story: Top detected types/rules (24h) Description Ranks most common detections and rules triggered. How it works AegisWAF applies this capability inside the Logs / Attack Story module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Logs / Attack Story Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Attack Story: Unique routes (24h)

Feature Attack Story: Unique routes (24h) Description Counts distinct routes/paths targeted in the last 24 hours. How it works AegisWAF applies this capability inside the Logs / Attack Story module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Logs / Attack Story Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Attack Story: Unique IPs (24h)

Feature Attack Story: Unique IPs (24h) Description Counts distinct source IPs seen in the last 24 hours. How it works AegisWAF applies this capability inside the Logs / Attack Story module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Logs / Attack Story Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Attack Story: Inspected requests (24h)

Feature Attack Story: Inspected requests (24h) Description Summary of how many requests were inspected by the engine in the last 24 hours. How it works AegisWAF applies this capability inside the Logs / Attack Story module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → Logs / Attack Story Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Archives: FAQs | Aegisify - WordPress Tools, Security…

Categories: AegisWAF
Inspection scope: Headers
read more
Categories: AegisWAF
Bot Control: Per-path override precedence
read more
Categories: AegisWAF
Bot Control: Per-path threshold wildcard matching
read more
Categories: AegisWAF
REST Progressive Enforcement: Block-at
read more
Categories: AegisWAF
REST Progressive Enforcement: Rate-limit-at
read more
Categories: AegisWAF
REST Progressive Enforcement: Challenge-at
read more
Categories: AegisWAF
Attack Story: Top detected types/rules (24h)
read more
Categories: AegisWAF
Attack Story: Unique routes (24h)
read more
Categories: AegisWAF
Attack Story: Unique IPs (24h)
read more
Categories: AegisWAF
Attack Story: Inspected requests (24h)
read more

What’s New At Aegisify