Security policies

Create a security policy

Create and customize F5 WAF for NGINX security policies in NGINX Instance Manager using the web interface or REST API.

Update a security policy

Update an existing F5 WAF for NGINX policy using the NGINX Instance Manager web interface or REST API.

Delete a security policy

Remove an existing F5 WAF for NGINX security policy using the NGINX Instance Manager web interface or REST API.

Add signature sets and exceptions

Configure attack signature sets and exceptions in F5 WAF for NGINX policies to fine-tune protection and reduce false positives.

Add cookies, parameters, and URLs

Configure cookie, parameter, and URL protections in your F5 WAF for NGINX policies using NGINX Instance Manager.

Review policy

Review and manage stored F5 WAF for NGINX policies and their version history in NGINX Instance Manager.

Matching types: Explicit vs. Wildcard

Learn how explicit and wildcard matching determine how F5 WAF for NGINX identifies and protects URLs, cookies, and parameters.