Add an App (policy) to the Rule

Select a WAAS rule to add an App in.
Select
Add app
.
In the
App Definition
tab, enter an
App ID
.
The combination of
Rule name
and
App ID
must be unique across In-Line and Out-Of-Band WAAS policies for Containers, Hosts, and App-Embedded.
If you have a Swagger or OpenAPI file, click
Import
, and select the file to load.
If you do not have a Swagger or OpenAPI file, manually define each endpoint by specifying the host, port, and path.
In
Endpoint Setup
, select
Add endpoint
.
Specify an endpoint in your web application that should be protected. Each defined application can have multiple protected endpoints.

Enter
HTTP host
(optional, wildcards supported).
HTTP hostnames are specified in the form of [hostname]:[external port].
The external port is defined as the TCP port on the host, listening for inbound HTTP traffic. If the value of the external port is "80" for non-TLS endpoints or "443" for TLS endpoints, it can be omitted. Examples: "*.example.site", "docs.example.site", "www.example.site:8080", etc.
Enter
Base path
(optional, wildcards supported) for WAAS to match.
Examples: "/admin", "/" (root path only), "/*", /v2/api", etc.
Enable
TLS
if your application uses the TLS protocol.
Select
Create
.
To facilitate inspection, after creating all endpoints, select
View TLS settings
in the endpoint setup menu.
WAAS TLS settings:
Certificate
- Copy and paste your server’s certificate and private key into the certificate input box (e.g., cat server-cert.pem server-key > certs.pem).
If your application requires API protection, select the "API Protection" tab and define for each path the allowed methods, parameters, types, etc. See detailed definition instructions in the API protection help page.
Continue to
App Firewall
tab, and select the protections as shown in the screenshot below:

For more information, see App Firewall settings.
Continue to
DoS protection
tab and select DoS protection to enable.
Continue to
Access Control
tab and select access controls to enable.
Continue to
Bot protection
tab, and select the protections as shown in the screenshot below:

For more information, see Bot protections.
Continue to
Custom rules
tab and select Custom rules to enable.
Continue to
Advanced settings
tab, and set the options shown in the screenshot below:

For more information, see Advanced settings.
Select
Save
.
You should be redirected to the
Rule Overview
page.
Select the created new rule to display
Rule Resources
and for each application a list of
protected endpoints
and
enabled protections
.

Test protected endpoint using the following sanity tests.
Go to
Monitor > Events > WAAS for Agentless
to observe the events generated.
For more information, see the WAAS analytics help page