younifyd
Menu

Patch Owasp Waf Package

Patch a OWASP ModSecurity Core Rule Set.

PATCH/organizations/{organizationId}/zones/{zoneId}/firewall/waf/packages/owasp

Use it in a workflow

  1. Add a step and choose the Salesforce Commerce Cloud connector.
  2. Pick the Patch Owasp Waf Package action (under Zones (Data API)).
  3. Fill in the fields below, then reference the result from later steps as {{patchOwaspWafPackage.response.data}}.

Request

Path parameters

zoneIdstringrequired
organizationIdstringrequired

An identifier for the organization the request is being made by

Request body

Enter the body as JSON in the step's Body field.

sensitivitystringrequired

Sensitivity for traditional (owasp) rule package.

One oflowmediumhighoff

action_modestringrequired

The default action that is taken for rules under traditional(owasp) firewall package.

One ofsimulatechallengeblock

json
{
  "sensitivity": "medium",
  "action_mode": "block"
}

Response

Returns 200 with an object. Read it in later steps with {{patchOwaspWafPackage.response.data.<field>}}.

dataobject
idstringrequired
namestringrequired

Name of the firewall package

descriptionstringrequired

Summary of purpose/function of firewall package

detection_modestringrequired

How the rules within the package are evaluated during the course of a request. When a package uses anomaly detection, each rule is given a score when triggered. If the total score of all triggered rules exceeds the sensitivity defined on the package, the action defined on the package is taken. Traditional detection decides which action to take when it is triggered by the request. If multiple rules are triggered, the action with highest protection is used. For example, a block action beats a challenge.

zone_idstringrequired

Zone identifier with which this rule package is associated.

sensitivitystringrequired

Sensitivity for traditional (owasp) rule package.

One oflowmediumhighoff

action_modestringrequired

The default action that is taken for rules under traditional(owasp) firewall package.

One ofsimulatechallengeblock

json
{
  "data": {
    "id": "a25a9a7e9c00afc1fb2e0245519d725b",
    "name": "OWASP Top 10 Protection",
    "description": "Protection against OWASP Top 10 vulnerabilities",
    "detection_mode": "traditional",
    "zone_id": "zone_1234567890abcdef",
    "sensitivity": "medium",
    "action_mode": "block"
  }
}

Need more? See the Salesforce Commerce Cloud guide for connection setup and behaviour shared by every action.