Traffic Matchers detail page

Traffic Matchers define conditions to match incoming traffic based on request properties and IP addresses.

Traffic Matchers are referenced in Anomaly Shield Applications and can be used for:

  • Training Data Collection - to exclude unwanted traffic from training.
  • Anomaly Detection Exclusions - to exclude known traffic from analysis.
  • Response Rule Exceptions to bypass actions for known traffic.

Section – Traffic Matcher

GUI

Description

Name

Assign a unique name for the entry.

Tenant

Add tenants to allow tenancy access. See also Multitenancy feature

Section – Matching Conditions

 
Notice

Incoming traffic must meet all conditions to match the Traffic Matcher, empty conditions are ignored. If an IP list is configured in the matcher, at least one IP list entry must match along with all other configured conditions in order to generate a traffic match.

GUI

Description

Header Name

Exclude headers (e.g., ^X-Header$).

Header Value

Exclude header values (e.g., ^X-Value$).

Path

Exclude request paths. (e.g., ^/path/to/match).

HTTP Method

Exclude methods. (e.g., ^(GET|POST)$).

Content Type

Exclude content types (e.g., ^application/.*).

IP Exclusions

Exclude specific IP addresses (defined in IP Address Lists).

Further information