If you are new to policies, see Getting Started with Policies and Common Policies. Tenancy: Allow group-id to use waf-network-address-list in tenancy To allow a specific user group to use web application firewall network address lists.To allow a specific user group to inspect web application firewall policies in aĬompartment: Allow group-id to inspect waf-policy in compartment_ocid.Tenancy: Allow group-id to manage web-app-firewall in tenancy To allow a specific user group to manage web application firewalls in your.Mandatory permissions list: Allow group-id to manage waas-family in compartment_ocidĪllow group-id to manage web-app-firewall in compartment_ocidĪllow group-id to manage waf-policy in compartment_ocidĪllow group-id to use waf-network-address-list in compartment_ocid If you try to perform an actionĪnd get a message that you do not have permission or are unauthorized, confirm with yourĪdministrator the type of access you have been granted and which compartment you should work in. To use Oracle Cloud Infrastructure, you must be given access in a policy for waas-policy. body inspection BLOCK mode protectionCapabilities.body inspection CHECK mode protectionCapabilities.header inspection BLOCK mode protectionCapabilities.header inspection CHECK mode protectionCapabilities.WAF policy rules are run in the following order:.You can use a policy with multiple load balancers as long as all load balancers are in the same region as the policy.

A single policy can be used with multiple load balancers.One WAF policy can't be used in multiple regions simultaneously. You can't assign an IPv6 address to an existing load balancer. Note IPv6 address assignment occurs only during load balancer creation.

Waf network