Modify slow POST protection settings

put

https://{hostname}/appsec/v1/configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/slow-post

All products Update slow POST protection settings for a specific policy.

Path Params

configId

int64

required

A unique identifier for each configuration.

versionNumber

integer

required

A unique identifier for each version of a configuration.

policyId

string

required

A unique identifier for a security policy.

Query Params

accountSwitchKey

string

For customers who manage more than one account, this runs the operation from another account. The Identity and Access Management API provides a list of available account switch keys.

Body Params

Contains threshold and action settings for slow POST protection.

action

string

enum

required

Specifies the action that the rule should trigger. Either alert or abort.

Allowed:

durationThreshold

object

If the edge server doesn't receive the first eight kilobytes of the POST body transfer within the specified time, the specified action in the policy is applied.

slowRateThreshold

object

The average rate in bytes per second over a period of time that you specify before an action (alert or abort) in the policy triggers. For example, if you set the slowRateThreshold to an average of 10 bytes per second in a 60 second period and a request comes in at an average of 5 bytes per second in a 60 second period, the action you specified in the policy triggers.

Headers

string

enum

Defaults to application/json

Generated from available response content types

Allowed:

Responses

200Successfully retrieved slow POST configuration.

400Bad request. Invalid request body or URL parameter input.

403Forbidden. You don't have access to the resource.

404Not found. That resource doesn't exist, or the URL is malformed.