Get Owasp Waf Package

Get a OWASP ModSecurity Core Rule Set.

GET/organizations/{organizationId}/zones/{zoneId}/firewall/waf/packages/owasp

Use it in a workflow

Add a step and choose the Salesforce Commerce Cloud connector.
Pick the Get Owasp Waf Package action (under Zones (Data API)).
Fill in the fields below, then reference the result from later steps as {{getOwaspWafPackage.response.data}}.

Request

Path parameters

zoneIdstringrequired

organizationIdstringrequired

An identifier for the organization the request is being made by

Response

Returns 200 with an object. Read it in later steps with {{getOwaspWafPackage.response.data.<field>}}.

dataobject

idstringrequired

namestringrequired

Name of the firewall package

descriptionstringrequired

Summary of purpose/function of firewall package

detection_modestringrequired

How the rules within the package are evaluated during the course of a request. When a package uses anomaly detection, each rule is given a score when triggered. If the total score of all triggered rules exceeds the sensitivity defined on the package, the action defined on the package is taken. Traditional detection decides which action to take when it is triggered by the request. If multiple rules are triggered, the action with highest protection is used. For example, a block action beats a challenge.

zone_idstringrequired

Zone identifier with which this rule package is associated.

sensitivitystringrequired

Sensitivity for traditional (owasp) rule package.

One oflowmediumhighoff

action_modestringrequired

The default action that is taken for rules under traditional(owasp) firewall package.

One ofsimulatechallengeblock

json

{
  "data": {
    "id": "a25a9a7e9c00afc1fb2e0245519d725b",
    "name": "OWASP Top 10 Protection",
    "description": "Protection against OWASP Top 10 vulnerabilities",
    "detection_mode": "traditional",
    "zone_id": "zone_1234567890abcdef",
    "sensitivity": "medium",
    "action_mode": "block"
  }
}

Need more? See the Salesforce Commerce Cloud guide for connection setup and behaviour shared by every action.

Was this page helpful?