Application protection

To set up application protection, go to Configuration scheme.

The application protection is configured in several stages. At each stage, you must select one of security modes described below.

Web application protection mode
Protection mode	Description	Purpose
No protection measures	PT Cloud AF does not block attacks or record security events	To check the application operation after connecting PT Cloud AF to it. To stop blocking traffic and logging security events
Detection and content modification	PT Cloud AF does not block attacks but records security events	To set up a security policy
All protection measures	PT Cloud AF blocks attacks and records security events	Main protection mode for your web application

Stage 1. Adding a web application

At this stage, you must create an application security policy, that is a set of rules for traffic processing.

To do this, add a web application to the PT Cloud AF interface. Select the No protection measures mode.

Check that the protected application is running correctly and proceed to stage 2.

At each step of the protection setup, check that the application is running correctly, for example, that it can be accessed via its domain name and that all application features work.

Stage 2. Fine-tuning your web application

At this stage, you must modify the application security policy according to the application specifics.

To fine-tune the application security policy:Next to the web application, click , change the protection mode to Detection and content modification, and save the changes.Check that the application is running correctly and set up the application security policy according to its specifics. For example, change how rules work or exclude false positives.The duration of this stage depends on the complexity of the protected application and can be up to several weeks.

Stage 3. Application protection

At this stage, change the web application protection mode to All protection measures. Make sure that the application is running correctly in the selected mode.