Skip to content

Commit 0b203ac

Browse files
Update content/includes/nap-waf/config/common/ip-groups-override-rules.md
Co-authored-by: Alan Dooley <[email protected]>
1 parent caa45bc commit 0b203ac

File tree

1 file changed

+6
-3
lines changed

1 file changed

+6
-3
lines changed

content/includes/nap-waf/config/common/ip-groups-override-rules.md

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,10 @@
11
#### IP-Groups feature as part of Override Rules feature.
2-
The Override Rules feature allows overriding of the original or parent policy settings.
3-
This can be done by defining override rules in the designated section, based on specific override conditions.
4-
Override rule condition with IP group based on JSON schema defined by the declarative policy and applied to "clientIp" attribute using “matches” function.
2+
The Override Rules feature allows you to modify original or parent policy settings.
3+
4+
Rules are defined using specific conditions, which can include an IP group based on the declarative policy JSON schema.
5+
6+
When triggered, the rule is applied to the _clientIp_ attribute using the _matches_ function.
7+
58
'clientIp.matches(ipAddressLists["standalone"])'
69

710
Here is a policy example:

0 commit comments

Comments
 (0)