The Custom WAF Signature database includes the custom Web Application Protection Rule, CC Attack Protection Rule, and Password Protection Rule. The Custom WAF Signature tab is shown below.

Click Add to enter the Add Signature dialog box, as shown in the following figure.

Rule Name, Description, and Impacts can be customized based on the situation.

Rule Type: Web Application Protection Rule, CC Attack Protection Rule, and Password Protection Rule can be selected.

Threat Level: The available three levels (High, Medium, and Low) define the severity of the rule.

Status: Three types are provided, including Enabled. Block if attack detected, Enabled. Allow if attack detected, and Disable.

Enabled. Block if attack detected: Indicate that the current rule is enabled. When an attack is detected, the corresponding packet is blocked.

Enabled. Allow if attack detected: Indicate that the current rule is enabled. When an attack is detected, the packet is logged but not blocked.

Disable: Indicate that the current rule is disabled. When the rule is disabled, the device does not detect the rule.

Character String, Regular Expression, and Direction are used to set the rule content. The previous two options can be empty, indicating that they are not used for matching.