Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All
     

    Related Documentation

     

    CLI: Config: Configure a Proxy Exclusion

    WebApp Secure functions as a reverse proxy. Therefore, all web traffic goes through WebApp Secure so that it can analyze traffic for attacks. To improve performance, you can configure WebApp Secure to not process certain types of resources, such as images, or zip files, for example. To configure an exclusion for certain file extensions that you want routed around WebApp Secure (as opposed to through it), you can use the configuration setting described here.

    For example, to have WebApp Secure not process any zip files, you can add the zip file extension to the proxy exclusions list by entering the following command at the WebApp Secure terminal:

    cli set engine.proxy.exclusions zip

    Now WebApp Secure will not process zip files.

    Note: Google Web Toolkit utilizes specialized cache files that can conflict with WebApp Secure. If your protected site utilizes Google Web Toolkit, you will need to add the file extension of these cache files (typically .cache.html) to the engine.proxy.exclusions parameter.

    Exclusions are not limited to file extensions. You can pass in any regex or standard string to match the URI. For example, to exclude all xml files from Security Engine processing, do the following:

    1. Navigate to Configuration > Expert Mode.
    2. Click the Add Parameter button.
    3. For Key enter engine.proxy.exclusions.
    4. For Value enter xml.
    5. Click Add Parameter. This value is now added to the exclusion list.

    Note: Using the cli, type the following to add the same exclusion: cli config set engine.proxy.exclusions xml

    As another example, to exclude all html files that end in 6 digits, do the following:

    1. Navigate to Configuration > Expert Mode.
    2. Click the Add Parameter button.
    3. For Key enter engine.proxy.exclusions.
    4. For Value enter [0-9]{6}\.html.
    5. Click Add Parameter. This value is now added to the exclusion list.

    Note: Using the cli, type the following to add the same exclusion: cli config set engine.proxy.exclusions "[0-9]{6}\.html"

     

    Related Documentation

     

    Published: 2014-06-27