How Should the TR7 WAF be Configured for Different Domains Serving Under the Same Service?

Step > 1

First, open the WAF Management screen of the relevant vService. To do this, follow "Monitor Mode > Related vService > WAF Management".

Step > 2

On the screen that appears, click the "+" button under "Virtual Host Groups" to create new Virtual Hosts for each domain directed to the vService. This allows defining separate WAF rule sets for each domain. Additionally, each newly added virtual host can operate in independent WAF modes. For example, a newly added domain can initially be activated in learning mode, and then go through analysis, monitor, and blocking modes step by step without affecting the other domains.

The "Default Host Group" contains the rule sets that will be triggered when a request does not match any of the added Virtual Hosts.