Rules
Using rules, you can define conditions for selecting HTTP request, specify actions for requests that match these conditions, and prioritize rules.
The rule priority is set as a numeric parameter from 1
to 1000000
.
Note
The smaller the value, the higher is the rule priority. The priorities for preconfigured rules are as follows:
- Basic default rule:
1000000
. - Smart Protection rule providing full protection:
999900
.
You can also log information about the traffic matching your conditions, without applying any action to it.
Yandex Smart Web Security provides the following rule types:
You can learn more in Managing rules.
Basic rules
Basic rule is a rule that allows or denies traffic based on specified conditions. It is used for simple traffic filtering based on specific parameters.
Each security profile includes a basic default rule with the lowest priority (1000000
) that allows or denies all traffic.
Smart Protection rules
Smart Protection is a rule that sends traffic, based on the specified conditions, for automatic analysis using machine learning and behavioral analysis algorithms. Suspicious requests are sent to SmartCaptcha for additional verification.
You can use the following captcha options:
-
Default
: Managed on the Yandex Cloud side, captcha parameters:- Main challenge: Checkbox.
- Additional challenge:
Silhouettes. - Additional challenge difficulty: Easy.
- Appearance: Standard.
The
Default
captcha usage fee is included in the cost of Smart Web Security. -
Custom captcha
: You can customize captcha difficulty, types of main and additional challenges, and appearance.Note
To use a custom captcha, select Disable domain verification in its settings.
The custom captcha usage fee is charged according to SmartCaptcha pricing policy.
Rule actions
Actions for basic rules:
- Deny traffic whose parameters match the conditions.
- Allow traffic whose parameters match the conditions.
Actions for Smart Protection rules:
- Full Protection: Traffic is checked by ML models and behavioral analysis tools. Suspicious requests are sent to SmartCaptcha.
- API Protection: Traffic is checked by ML models and behavioral analysis algorithms. Suspicious requests are blocked.