Enable OWASP ruleset only for a specific host
Does anyone know if this is possible ? I have a client that claims that it can be but I can find no information that backs this up. Ok, it is possible ! 👍
2 Replies
If you click the little 3 dots next to the OWASP Core Ruleset, click "Edit" then under Execution Scope click "Edit Scope" and change it from All Incoming Requests to Custom Filter Expression. Then you can do Hostname equals, or Hostname is in list, etc
@Chaika Brilliant! Thank you for this. Will share this info with my team. Cheers :10000:
@Chaika I successfully tested your solution today. Worked flawlessly. Again I appreciate your help with this.