Endpoint Policies: override action + categories + thresholds per path (UI uses PRO Mode)

Feature Endpoint Policies: override action + categories + thresholds per path (UI uses PRO Mode) Description Advanced per-path overrides. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Endpoint Policies framework (per-path policy match + applied logging)

Feature Endpoint Policies framework (per-path policy match + applied logging) Description Per-endpoint policy matching framework. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

JS Challenge Token support (challenge + TTL settings)

Feature JS Challenge Token support (challenge + TTL settings) Description Challenge token flow to gate suspicious traffic. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Use 10–30 minutes TTL for normal browsing; shorter TTL for high-risk endpoints.

Heuristic tuning (score threshold, encoding threshold, meta threshold, token length)

Feature Heuristic tuning (score threshold, encoding threshold, meta threshold, token length) Description Tuning controls to reduce false positives. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Heuristic layer evaluation (request scoring layer runs in engine)

Feature Heuristic layer evaluation (request scoring layer runs in engine) Description Scoring layer beyond signatures. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Action mode: FREE forced to LOG; PRO can use Log / Block / Challenge / Rate Limit

Feature Action mode: FREE forced to LOG; PRO can use Log / Block / Challenge / Rate Limit Description Global action mode / enforcement policy. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Sensitivity mode: balanced / strict (signature pack selection)

Feature Sensitivity mode: balanced / strict (signature pack selection) Description Select rule pack sensitivity. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Managed Rule categories (PRO-only enforcement): RCE / Command Injection / SSRF / File Upload

Feature Managed Rule categories (PRO-only enforcement): RCE / Command Injection / SSRF / File Upload Description Advanced categories with PRO enforcement. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Managed Rule categories (always available): SQLi / XSS / Path Traversal

Feature Managed Rule categories (always available): SQLi / XSS / Path Traversal Description Core OWASP categories. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the module toggle/switch on this screen (or the relevant category toggle) to enable/disable. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

Managed Rules engine enabled toggle

Feature Managed Rules engine enabled toggle Description Enable/disable managed rules pack. How it works AegisWAF applies this capability inside the WAF Rules module. The engine evaluates configuration, applies matching (path/method/tokens/counters/providers), then records evidence into the event log and executes the configured enforcement action when conditions are met. How to access / Enable or disable Access: AegisWAF → WAF Settings (Rules section) Enable/Disable: Use the toggle on this screen to turn it ON or OFF, then click Save. Recommended setting Start conservative (LOG or Challenge) for new deployments; tighten to Block once you confirm low false positives.

FAQs – Page 44 – Aegisify, Inc. – Free WordPress Security Audit and Scans with Agentic AI

Categories: AegisWAF
Endpoint Policies: override action + categories + thresholds per path (UI uses PRO Mode)
read more
Categories: AegisWAF
Endpoint Policies framework (per-path policy match + applied logging)
read more
Categories: AegisWAF
JS Challenge Token support (challenge + TTL settings)
read more
Categories: AegisWAF
Heuristic tuning (score threshold, encoding threshold, meta threshold, token length)
read more
Categories: AegisWAF
Heuristic layer evaluation (request scoring layer runs in engine)
read more
Categories: AegisWAF
Action mode: FREE forced to LOG; PRO can use Log / Block / Challenge / Rate Limit
read more
Categories: AegisWAF
Sensitivity mode: balanced / strict (signature pack selection)
read more
Categories: AegisWAF
Managed Rule categories (PRO-only enforcement): RCE / Command Injection / SSRF / File Upload
read more
Categories: AegisWAF
Managed Rule categories (always available): SQLi / XSS / Path Traversal
read more
Categories: AegisWAF
Managed Rules engine enabled toggle
read more

News & Events