Skip to content

Commit

Permalink
Simplify dashboard instructions in example
Browse files Browse the repository at this point in the history
  • Loading branch information
pedrosousa committed Oct 16, 2024
1 parent a3fbc0f commit 48aaf4a
Showing 1 changed file with 4 additions and 16 deletions.
20 changes: 4 additions & 16 deletions src/content/docs/waf/account/managed-rulesets/index.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -32,27 +32,15 @@ The second rule logs any matches for PL4 rules, the most strict set of rules in

<Tabs syncKey="dashPlusAPI"> <TabItem label="Dashboard">

1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/) and select your account.

2. Go to Account Home > **WAF** > **Managed rulesets**.

3. Select **Deploy** > **Deploy managed ruleset**.

4. Next to the **Cloudflare OWASP Core Ruleset**, select **Select ruleset**.

5. Give a name to the rule deploying the ruleset in **Execution name**.

6. (Optional) To execute the managed ruleset for a subset of incoming requests, select **Edit scope** and [configure the expression](/ruleset-engine/rules-language/expressions/edit-expressions/) that will determine the scope of the current rule deploying the managed ruleset.

7. Customize the behavior of the managed ruleset in the following ways:
1. Deploy the Cloudflare OWASP Core Ruleset by following the [dashboard instructions](/waf/account/managed-rulesets/deploy-dashboard/#deploy-a-managed-ruleset), customizing the ruleset behavior using these settings:

- **OWASP Anomaly Score Threshold**: _Medium - 40 and higher_
- **OWASP Paranoia Level**: _PL3_
- **OWASP Action**: _Managed Challenge_

8. Select **Deploy**.
2. Select **Deploy**.

9. Repeat the procedure with the following ruleset configuration:
3. Repeat the deployment procedure for the OWASP ruleset, but with following ruleset configuration:

- **OWASP Anomaly Score Threshold**: _Medium - 40 and higher_
- **OWASP Paranoia Level**: _PL4_
Expand All @@ -62,7 +50,7 @@ Once you finish your configuration, the **Deployed managed rulesets** list will

</TabItem> <TabItem label="API">

The following `POST` request creates an [entry point ruleset](/ruleset-engine/about/rulesets/#entry-point-ruleset) for the `http_request_firewall_managed` phase at the account level. The ruleset includes two rules deploying the Cloudflare OWASP Core Ruleset twice with different configurations.
The following `POST` request for the [Create an account ruleset](/api/operations/createAccountRuleset) operation creates an [entry point ruleset](/ruleset-engine/about/rulesets/#entry-point-ruleset) for the `http_request_firewall_managed` phase at the account level. The ruleset includes two rules deploying the Cloudflare OWASP Core Ruleset twice with different configurations.

```bash
curl "https://api.cloudflare.com/client/v4/accounts/{account_id}/rulesets" \
Expand Down

0 comments on commit 48aaf4a

Please sign in to comment.