Follow

Q&A: Do User Tags Impact WAF Assessments?

Question

  • Q&A: Do User Tags Impact WAF Assessments?
  • Can I limit what users can see in WAF assessments?

 

Environment

  • Silverline WAF
  • WAF Violation Assessment
  • User Management
    • RBAC
    • User Tags

 

Answer

Yes

  • WAF Assessments themselves cannot be assigned tags.  
  • However, the results of a WAF assessment will be based on the user who is viewing the assessment.

Example

  1. User1 (with tags: role1, role2, and role3) creates a WAF assessment
  2. User1's WAF assessment will be based on WAF policies that match role1, role2, role3 and any untagged WAF policies.
  3. User2 (with tags: role3 and role4):
    • Can view the WAF assessment created by the User1
    • Can only see violations of polices that are untagged and policies that match their own roles (role3).  
  4. User2 sees a warning that the results are filtered based on their tags:

waf-assessment-warning.png

 

Related Content

 

Was this article helpful?
2 out of 2 found this helpful
Have more questions? Submit a request