Smarter by Design.Simpler for Business
WAF-Protected vServices
What Is WAF-Protected vServices?
WAF-Protected vServices lists in the Left Monitor Panel the vServices on which WAF protection is enabled together with their statuses and the value of a selected WAF metric. Since WAF works only on the vServices of the HTTP type, only this type takes place in the list. Every row is a vService; the colored strip on the left of the row shows the status of the vService and the column on the right shows the value of the selected metric. When a row is clicked, the WAF Dashboard tab of that vService opens on the main screen.
By default the category shows the total of the WAF Blocked Requests metric over the last one day in the Total requests column and refreshes the values every 5 seconds; in this way the list shows how many requests have been blocked on which vService. The list is filtered by name and by status. The selected category, the filters and the view settings are stored per user; when the session is opened again, the panel comes in the same state.
WAF Enabled
Scope
Only the HTTP vServices on which WAF protection is enabled are listed
6
Statuses
OK, Warning, Error, Disabled, Evaluating, Unknown
2
Filter Tabs
Name, Status
5s
Refresh
The default refresh interval; 10s, 30s and 60s are also selected
Accessing the Screen
- Left Monitor Panel is opened.
- WAF-Protected vServices is selected from the category tabs at the top left.
- The vServices defined on TR7 with WAF protection enabled are listed.
- The vService to be monitored is clicked; the screen opens with the Dashboard tab that carries the vService's name.
If WAF-Protected vServices is not seen in the category list, the user has no WAF authorization or the category has been removed with the Edit Tabs arrangement in the category list; a removed category is added again from the same arrangement. When WAF protection is enabled on a vService, the vService is added to the list by itself, and when it is disabled, it goes out of the list.
The WAF-Protected vServices Screen
The WAF-Protected vServices Screen
At the top part of the screen there are the category selector and the toolbar, below them the status strip, the search box and the vService table, and at the very bottom the metric information row and the total strip. By default the table opens with the following columns:
| Column | Description |
|---|---|
| The status strip | The colored strip on the left of the row shows the status of the vService; the colors are the same as the colors in the status strip. When it is hovered over, the status name is displayed. |
| vService | The name of the vService. Long names are shortened; when they are hovered over, the full name is displayed. |
| Total requests | The total number of the requests blocked by WAF on the vService (WAF Blocked Requests, Total requests). |
The Total requests column belongs to the default Primary Metric value; when another metric is selected in the View Settings window, the columns of that metric come in place of this column. When a metric cell is hovered over, the vService name, the metric, the period and the value are displayed. When the value changes, an arrow of two seconds appears in the metric cell, and when the status changes, in the name cell.
By default the table is sorted by name from A to Z. The sorting is changed by clicking a column header: the first click on a column that is not sorted sorts the name and status strip columns from the smallest to the largest and the metric columns from the largest to the smallest; a second click on the same column reverses the order and a third click removes the sorting. In the table one navigates between the rows with the ↑ and ↓ keys; the selected row opens half a second later and the Enter key opens the row immediately. The ← and → keys pass to the previous or the next category.
When a row is clicked, the WAF Dashboard tab that carries the name of the vService opens on the main screen; the Dashboard comes with the Display Period value in the panel.
The Category Selector
Which object group the panel will list is selected. When the label or the arrow next to it is clicked, the category list opens; the default order is Load Balancer vServices, WAF-Protected vServices, AGS-Enabled vServices, Bot/DDoS Protected vServices, Backend Services, Backend Service Groups, GTM, Interfaces and Route Tables & L4 DDoS. The categories for which the user has no authorization are not displayed in the list.
With the Edit Tabs button in the list, the categories are reordered by dragging, are added with Add Tab and are edited or deleted with the buttons on the right of the row. The changes are saved with the check mark; Discard changes undoes the changes made and Reset to Defaults returns to the default category list.
vService List
By clicking the vService list button, the WAF-Protected vService List screen opens on the main screen. While the listing screen is open, the button is displayed as active.
Search
The Search button shows or hides the search box above the table. The search is made only in the vService name and the table is filtered as it is typed. The cross mark in the box clears the search; the Esc key or clicking the button again hides the box and clears the search. Whether the box is open or closed is stored per user; by default it is open.
Filter
By clicking the Filter button, the Filter window opens. While a filter is active, a dot appears on the button and the tooltip of the button writes how many vServices are shown in the form Showing X of Y.
View Settings
By clicking the Settings button, the View Settings window opens.
Collapse
The Collapse button collapses the panel. The collapsed panel turns into a narrow icon strip: every category is shown with an icon and the small status dots below it. When the icon is hovered over, the category name and the status distribution are displayed; when the icon is clicked, the panel expands again with that category. The width of the panel is changed by dragging its right edge and is stored per user.
The Metric Information Row
It shows the selected metric of the table, its calculation type and its period; by default it writes WAF Blocked Requests — Total requests, last 1 day(s). By clicking the row, the View Settings window opens. While the data is loading, the settings icon in the row turns; the ring around the icon shows the time remaining until the next refresh.
The total strip below it gives the total of the rows that are visible in the table at that moment (with the filter and the search applied) separately for every metric column: in the default metric, Σ Total requests. In the metrics that cannot be added up, such as a percentage or a ratio, the average (x̄) is shown instead of the total.
The Status Strip
The strip below the toolbar shows the number of the vServices in the list by status; there is a box for every status that has a vService at that moment. The boxes are counted according to the name filter; the search and the Status filter do not change the numbers, so all the statuses continue to be seen on the strip.
| Status | Color | Meaning |
|---|---|---|
| OK | Green | The vService is running and receiving traffic. |
| Warning | Yellow | Some Backend Services are unreachable or in maintenance state, or there is a problem in the frontend IP addresses. |
| Error | Red | The vService process is not up, no Backend Service is healthy, the frontend IP address or interface cannot be found, or there is a configuration error. |
| Disabled | Gray | The vService has been disabled manually or the vDevice it is bound to is off. |
| Evaluating | The accent color | The vService is being created, edited or its configuration is being reloaded. |
| Unknown | The dark accent color | No status record has been read yet for the vService. |
The colors come from the selected theme; for the details of the statuses see vService Status.
When a box is clicked, that status is added to the Status filter in the Filter window and the table shows only the vServices in that status; when it is clicked again, the status is removed from the filter. More than one box can be selected and the selected boxes are displayed highlighted. The strip is hidden with the Show status bar option in the View Settings window.
The Filter Window
In the window that opens by clicking the Filter button, the vServices in the table are filtered according to the values in the tabs.
The Filter Window
In the header of every tab the number of values in that tab is written, and next to every value the number of vServices that have that value. When no value is selected in a tab, that tab does not filter the list. When more than one value is selected in a tab, the vServices that match any one of them are listed, and when a selection is made in both tabs, the vServices that match the condition of the two tabs together are listed.
Tabs
INFO
Name Default: All
The name of every vService on which WAF protection is enabled is listed; the selected vServices are shown in the table.
INFO
Status Default: All
It is filtered by vService status; the statuses in the status strip are listed as colored labels. Clicking a box in the status strip also changes the selection in this tab.
Window Controls
INFO
Select All
The Select all button selects all the values displayed in the tab; while all the values are selected, the button becomes Deselect all and removes the selection.
INFO
Search
In the Name tab the values are filtered according to the text typed in the search box; Select all is applied only to the filtered values. In the other tabs there is no search box.
INFO
Save
By clicking the Save button, the selected filters are applied and stored per user. If the window is closed without the Save button being clicked, the selections made are not applied.
The View Settings Window
In the window that opens by clicking the Settings button or the metric information row, which metric the table will show, its sorting and its refresh period are set.
The View Settings Window
The settings are stored per category and per user; a setting made for WAF-Protected vServices does not affect the other categories.
Metrics
INFO
View Type Default: Basic
The view of the list is selected:
- Basic: the vServices are listed as a table with the columns of the selected metric.
- Advanced: every vService is shown as a card; on the card there are at most five additional metrics together with the Primary Metric. In this view the Additional Metrics field in which the additional metrics are selected is added to the window.
INFO
Primary Metric Default: WAF Blocked Requests, Total requests
The metric to be shown in the table and the calculation type are selected. In the first box the WAF metrics of the vServices are listed; these metrics are the panels on the WAF Dashboard screen of the vService. The Load Balancer, AGS and Bot/DDoS metrics are not listed in this category; these metrics are in their own categories. The Static group contains two pieces of information that do not depend on time:
- WAF mode: the WAF mode of the vService and the learning settings that are on.
- OWASP protection level: the name of the signature protection level assigned to the vService.
In the second box it is selected how the selected metric will be calculated. For WAF Blocked Requests the options are Last req/s, Avg. req/s, Max. req/s and Total requests.
Sorting & Appearance
INFO
Sort By Default: Name
The sorting criterion of the table is selected: Default Order, Name, Status or one of the columns of the selected metric (in the default metric, Blocked).
INFO
Ascending Default: Checked
While it is checked, the sorting is made from the smallest to the largest (from A to Z), and while it is not checked, from the largest to the smallest.
INFO
Group by Status Default: Not checked
When it is selected, the vServices are grouped by their statuses; the groups are arranged in the order Unknown, Disabled, Error, Warning, Evaluating and OK. At the beginning of every group the status name and the number of vServices are written; by clicking the group header, the group is opened or closed.
Data Refresh
INFO
Display Period Default: Last 1 day(s)
The period over which the metric value will be calculated is selected. The ready options are 1 minute, 5 minutes, 15 minutes, 30 minutes, 1 hour, 6 hours, 12 hours, 1 day, 1 week, 1 month, 3 months and 1 year; the period is also entered manually. The field is not displayed when no time-dependent metric is selected in the saved setting and in the window (e.g. when a metric is selected only from the Static group). The WAF Dashboard that opens when a row is clicked comes with this period.
INFO
Refresh Interval Default: 5s
The refresh interval of the values in the table is selected: 5s, 10s, 30s, 60s.
INFO
Accept
By clicking the Accept button, the settings are saved and the table is refreshed with the new settings.
