Bật WAF managed rules Enable WAF managed rules បើក WAF managed rules

Làm theo từng bước Follow along ធ្វើតាមជំហាន

1. 1 Security → WAF → Managed rules. Bật Cloudflare Managed Ruleset / OWASP (tên menu có thể là Streamlined WAF). Security → WAF → Managed rules. Enable the Cloudflare Managed Ruleset / OWASP (menu may say Streamlined WAF). Security → WAF → Managed rules។ បើក Cloudflare Managed Ruleset / OWASP (menu អាចនិយាយ Streamlined WAF)។

   Nhấp: Click: ចុច៖ Managed rules → Enable Managed rules → Enable Managed rules → Enable

2. 2 Đừng Block ngay trên production lạ. Action Log chỉ có trên Enterprise. Gói khác: Managed Challenge trên path hẹp, xem Security Events, rồi mới Block. Do not Block immediately on an unfamiliar production site. The Log action is Enterprise only. On other plans, use Managed Challenge on a narrow path, check Security Events, then Block. Do not Block immediately on an unfamiliar production site. The Log action is Enterprise only. On other plans, use Managed Challenge on a narrow path, check Security Events, then Block.

   Checkpoint: Checkpoint: Checkpoint៖ Security Events bắt đầu có sự kiện. Lọc path /login, /admin, /api. Security Events starts showing events. Filter paths /login, /admin, /api. Security Events ចាប់ផ្តើមបង្ហាញ events។ Filter paths /login, /admin, /api។

3. 3 Sau baseline: chuyển rule ổn định sang Block. Thêm custom rule cho /admin nếu cần (country, AS, hoặc challenge). After a baseline: move stable rules to Block. Add a custom rule for /admin if needed (country, AS, or challenge). បន្ទាប់ពី baseline៖ ផ្លាស់ rules ស្ថិរភាពទៅ Block។ បន្ថែម custom rule សម្រាប់ /admin បើត្រូវការ (country, AS, ឬ challenge)។

   Nhấp: Click: ចុច៖ Custom rules → Create rule Custom rules → Create rule Custom rules → Create rule

   Nhập: Enter: បញ្ចូល៖ http.request.uri.path contains "/admin" — action Managed Challenge (ví dụ) http.request.uri.path contains "/admin" — action Managed Challenge (example) http.request.uri.path contains "/admin" — action Managed Challenge (example)

4. 4 Review false positive: exception cho webhook/payment path nếu bị dính OWASP. Review false positives: exceptions for webhook/payment paths if OWASP hits them. ពិនិត្យ false positives៖ exceptions សម្រាប់ webhook/payment paths បើ OWASP បុកពួកវា។

   Checkpoint: Checkpoint: Checkpoint៖ Một ngày không có ticket “checkout chết” trước khi Block rộng. A day without “checkout is dead” tickets before a wide Block. មួយថ្ងៃដោយគ្មាន tickets “checkout is dead” មុន Block ទូលំទូលាយ។

Cẩn thận Watch out ប្រុងប្រយ័ត្ន

• Block toàn bộ managed rules ngày đầu — form và API hợp lệ dễ gãy. Blocking all managed rules on day one easily breaks legitimate forms and APIs. ការធ្វើ Block managed rules ទាំងអស់នៅ day one ងាយបំបែក forms និង APIs ស្របច្បាប់។
• WAF không chạy nếu hostname còn grey-cloud. WAF does not run if the hostname is still grey-cloud. WAF មិនរត់បើ hostname នៅតែ grey-cloud។

Mẹo Tips គន្លឹះ

• Golden rule: trên Enterprise thì Log rồi Block. Gói khác dùng Managed Challenge trên path hẹp và xem Security Events trước khi Block. Golden rule: on Enterprise, Log then Block. On other plans, use Managed Challenge on a narrow path and check Security Events before Block. Golden rule: on Enterprise, Log then Block. On other plans, use Managed Challenge on a narrow path and check Security Events before Block.
• Learning path Application security có thứ tự account → default traffic → WAF. The Application security learning path orders account → default traffic → WAF. Application security learning path តម្រៀប account → default traffic → WAF។