Metrics analytics data obtained for intelligent Web Application Firewall (WAF) are available for viewing in the Controller UI.

To view WAF related metrics:

  1. Navigate to Applications > Virtual Services.

  2. Click the virtual service mapped to the WAF policy, and navigate to the WAF tab.

The chart in this tab displays WAF rule hits against the chosen time frame. This helps analyze denied requests and their corresponding trigger.

The following fields show specific hit counts for each listed element:

  • Group

  • Rule

  • Tag

  • Client IP

  • Path

  • Match Element

Elements in each field are displayed with the corresponding hit count. On discovering a false positive, any rule or group can be disabled using the toggle button. Clicking on any element in each field creates a specific filter. The field Popular Combinations displays the known combinations and their hit counts related to the chosen filter. The filter can be reset by clicking Reset filters.