Tencent Cloud EdgeOne (EdgeOne) provides 3 types of web protection policies that are independent of each other. Each domain name can only apply one type of protection policy:
Site-level security policy: A unified policy set for the entire site, which is applicable to all domain names under the current site by default and is also the protection policy that takes effect by default for newly connected domain names under the current site.
Domain-level security policy: It is allowed to set an independent policy for each domain name to meet specific security requirements for different domain names.
Security Protection templates: It is allowed for users to create and apply a set of predefined protection policies. These templates can be applied to one or more domain names to simplify the configuration process.
The following figure shows examples of the application scope for the three protection policies. For the request processing sequence within each Web Protection policy, please refer to Web Protection request processing sequence.
A Method to Determine the Policy Used for a Domain Name
1. Log in to the Tencent Cloud EdgeOne console, enter Service Overview in the left menu bar, and click the site to be configured under Website Security Acceleration.
2. Click Security Protection > Web Protection to go to the Domain-level security policy tab.
3. In the search box in the upper right corner, enter the domain name to find the corresponding domain name entry.
4. In the domain name entry, you can view the security policy type and the policy name or ID.
A Method to Determine the Applicable Domain Name Range for a Protection Template
1. Log in to the Tencent Cloud EdgeOne console, enter Service Overview in the left menu bar, and click the site to be configured under Website Security Acceleration.
2. Click Security Protection > Web Protection to go to the SecurityProtection templates tab.
3. In the search box in the upper right corner, enter the policy template name or ID to search for the corresponding policy template.
4. In the policy template entry, you can view Associated domain counts and click it to display the list of domain names associated with the policy template in the pop-up window.
5. If necessary, you can click Apply to domains to apply the policy template to other domain names.
Setting an Independent Policy for a Domain Name
1. Log in to the Tencent Cloud EdgeOne console, enter Service Overview in the left menu bar, and click the site to be configured under Website Security Acceleration.
2. Click Security Protection > Web Protection to go to the Domain-level security policy tab.
3. In the target domain name entry, click Change policy.
4. In the pop-up window, select Change to and the target protection policy.
5. Click OK to save the configuration.
Note:
After the configuration is saved and the deployment is completed, the new protection policy will be used for the domain name. Monitor the protection effectiveness to ensure it meets your expectations and adjust the policy in time.
