This document serves as a guide for administrators on how to configure the whitelist settings within the SiteWALL Admin Portal. Whitelisting allows for the specification of elements (such as IP addresses, URIs, or URLs) that are permitted to bypass certain rules or restrictions, ensuring smooth operation for trusted sources.

1) IP ADDRESS: Allows the whitelisting of a specific IP address or range of IP addresses.

2) URI: Permits the whitelisting of a specific URI.

3) RULE ID: Enables the whitelisting of a specific rule identified by its ID.

4) Advanced: Offers complex whitelisting options using custom rules and conditions (detailed below).

How to configure whitelist in SiteWALL WAF 

A) Whitelisting an IP Address

B) Whitelisting a URI

To whitelist a specific URI, follow these steps:

1. Select the relevant application from the dropdown list.

2.  Whitelist Type: In the dropdown list for "Whitelist Type," select "URI" and click on Add Whitelist button.

3. Enter the URI you wish to whitelist into the input field and click on the Add button to finalize the whitelisting of the URI.

4.  Select the condition you want to configure (is, contains, or begins with), choose the relevant option from the dropdown list, and enter the specific URI to be whitelisted.

5. Click the Add button to finalize the URI whitelisting.

C) Whitelisting a RULE ID

      To whitelist a specific rule, follow these steps:

1. Application Selection: Decide whether the whitelisting is for a specific application or all applications. If it's for all, select "ALL" in the Application List. For a specific application, choose the relevant application from the dropdown list.

2. Whitelist Type: In the dropdown list for "Whitelist Type," select "RULE ID" and click on Add Whitelist button.

3. Enter the Rule ID you wish to whitelist into the input field (You can enter multiple Rule IDs, separated by spaces or commas).

4. Click on the Add button to finalize the whitelisting of the Rule ID.

D) Whitelisting using the Advance Option

      With the Advanced Whitelist option, you can configure Whitelisting a specific rule if the URI meets certain pre-defined conditions.

            

      Supported pre-defined conditions are as below:

i)           is --> URI is a Complete match. Whitelist a rule if the URI matches completely.

ii)         contains --> URI contains specified parameter. Whitelist a rule if the URI contains a specified parameter.

iii)        begins with --> URI starts with specified parameter. Whitelist a rule if the URI begins with a specified parameter.

      To whitelist using the Advance option, follow these steps:

1.  Application Selection: Select the application from the Application List.

2. Whitelist Type: In the dropdown list for "Whitelist Type," select "Advance" and click on the Add button.

3. Select the condition you want to configure and specify the parameter for matching. Enter the Rule ID to be Whitelisted when this parameter is matched.

4. Click on the Add button to finalize the whitelisting using the Advance condition.