https://phron.tech/products/waf/Recent content in Teichion on PhronIQHugoenhttps://phron.tech/products/waf/user-guide/Mon, 01 Jan 0001 00:00:00 +0000https://phron.tech/products/waf/user-guide/<p>Use this guide to understand the WAF Console, its role-based pages, and the workflows for protecting and investigating traffic.</p> <p><strong>In-app help:</strong> click the <strong>?</strong> icon in the top header from any page to open this guide inside the Console, filtered to what&rsquo;s relevant to your role.</p> <h2 id="table-of-contents">Table of Contents</h2> <ol> <li><a href="https://phron.tech/products/waf/user-guide/#first-login">First Login</a></li> <li><a href="https://phron.tech/products/waf/user-guide/#roles--permissions">Roles &amp; Permissions</a></li> <li><a href="https://phron.tech/products/waf/user-guide/#core-concepts">Core Concepts</a></li> <li><a href="https://phron.tech/products/waf/user-guide/#feature-reference">Feature Reference</a></li> <li><a href="https://phron.tech/products/waf/user-guide/#workflows">Workflows</a></li> <li><a href="https://phron.tech/products/waf/user-guide/#the-approval-queue">The Approval Queue</a></li> <li><a href="https://phron.tech/products/waf/user-guide/#troubleshooting">Troubleshooting</a></li> <li><a href="https://phron.tech/products/waf/user-guide/#glossary">Glossary</a></li> <li><a href="https://phron.tech/products/waf/user-guide/#tips--shortcuts">Tips &amp; Shortcuts</a></li> </ol> <hr> <h2 id="first-login">First Login</h2> <h3 id="option-1-oidc-sso-recommended-for-production">Option 1: OIDC SSO (recommended for production)</h3> <ol> <li>Click <strong>Sign in with SSO</strong> on the login page.</li> <li>Select your organization&rsquo;s identity provider.</li> <li>Complete your organization&rsquo;s authentication flow. You&rsquo;re redirected back to the Console already signed in.</li> </ol> <p>OIDC providers are configured by a <code>security_admin</code>/<code>owner</code> under <strong>Settings → OIDC</strong> (see <a href="https://phron.tech/products/waf/user-guide/#settings">Settings</a>).</p>https://phron.tech/products/waf/operator-guide/Mon, 01 Jan 0001 00:00:00 +0000https://phron.tech/products/waf/operator-guide/<p>This guide describes the operator workflow across the WAF console&rsquo;s operations and tuning pages. All pages are under <code>/dashboard/</code> in the management UI.</p> <h2 id="prerequisites">Prerequisites</h2> <p>A tenant and environment must be selected in the top-bar picker before any page loads operational data.</p> <h2 id="pages--workflows">Pages &amp; Workflows</h2> <h3 id="1-managed-rules--dashboardmanaged-rules">1. Managed Rules — <code>/dashboard/managed-rules</code></h3> <p>Manage rule packages, view CRS coverage, configure anomaly thresholds, and manage false-positive exclusions.</p> <p><strong>Workflow:</strong></p> <ol> <li><strong>Packages</strong> tab — Browse installed rule packages (OWASP CRS, etc.).</li> <li><strong>Coverage</strong> tab — View per-package rule seeding rate and compatibility status.</li> <li><strong>CRS Config</strong> tab — Toggle CRS on/off, set mode (detect/block), paranoia level, and inbound/outbound anomaly thresholds.</li> <li><strong>Exclusions</strong> tab — Add/remove false-positive exclusions by rule ID, tag, target variable, or route scope.</li> </ol> <h3 id="2-ddos-operations--dashboardddos">2. DDoS Operations — <code>/dashboard/ddos</code></h3> <p>View active DDoS mitigations, anomaly campaigns, and configure rate-limit thresholds.</p>