JS Challenge Token support (challenge + TTL settings)

Feature JS Challenge Token support (challenge + TTL settings) Description Challenge token flow to gate suspicious traffic. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Use 10–30 minutes TTL for normal browsing; shorter TTL for high-risk endpoints.

Heuristic tuning (score threshold, encoding threshold, meta threshold, token length)

Feature Heuristic tuning (score threshold, encoding threshold, meta threshold, token length) Description Tuning controls to reduce false positives. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Heuristic layer evaluation (request scoring layer runs in engine)

Feature Heuristic layer evaluation (request scoring layer runs in engine) Description Scoring layer beyond signatures. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Action mode: FREE forced to LOG; PRO can use Log / Block / Challenge / Rate Limit

Feature Action mode: FREE forced to LOG; PRO can use Log / Block / Challenge / Rate Limit Description Global action mode / enforcement policy. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Sensitivity mode: balanced / strict (signature pack selection)

Feature Sensitivity mode: balanced / strict (signature pack selection) Description Select rule pack sensitivity. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Managed Rule categories (PRO-only enforcement): RCE / Command Injection / SSRF / File Upload

Feature Managed Rule categories (PRO-only enforcement): RCE / Command Injection / SSRF / File Upload Description Advanced categories with PRO enforcement. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Managed Rule categories (always available): SQLi / XSS / Path Traversal

Feature Managed Rule categories (always available): SQLi / XSS / Path Traversal Description Core OWASP categories. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Managed Rules engine enabled toggle

Feature Managed Rules engine enabled toggle Description Enable/disable managed rules pack. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the toggle on this screen to turn it ON or OFF, then click Save. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

FREE enforcement cap: only first 5 enabled rules are evaluated (hard cap in engine)

Feature FREE enforcement cap: only first 5 enabled rules are evaluated (hard cap in engine) Description Free tier evaluation cap for performance/monetization. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the toggle on this screen to turn it ON or OFF, then click Save. Recommended setting In FREE, keep your top 5 rules enabled and tuned; move bulk rules into PRO for full evaluation.

Regex conditions (one regex per line) — enforced only in PRO

Feature Regex conditions (one regex per line) — enforced only in PRO Description Regex-based matching (PRO enforcement). How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Archives: FAQs | Aegisify - WordPress Tools, Security…

Categories: AegisWAF
JS Challenge Token support (challenge + TTL settings)
read more
Categories: AegisWAF
Heuristic tuning (score threshold, encoding threshold, meta threshold, token length)
read more
Categories: AegisWAF
Heuristic layer evaluation (request scoring layer runs in engine)
read more
Categories: AegisWAF
Action mode: FREE forced to LOG; PRO can use Log / Block / Challenge / Rate Limit
read more
Categories: AegisWAF
Sensitivity mode: balanced / strict (signature pack selection)
read more
Categories: AegisWAF
Managed Rule categories (PRO-only enforcement): RCE / Command Injection / SSRF / File Upload
read more
Categories: AegisWAF
Managed Rule categories (always available): SQLi / XSS / Path Traversal
read more
Categories: AegisWAF
Managed Rules engine enabled toggle
read more
Categories: AegisWAF
FREE enforcement cap: only first 5 enabled rules are evaluated (hard cap in engine)
read more
Categories: AegisWAF
Regex conditions (one regex per line) — enforced only in PRO
read more

What’s New At Aegisify