WAF Rules for HTTP Requests

We apply two types of Rules/Rule Groups to our Web Application Firewall (WAF). These impose constraints on HTTP requests you make to the m3ter platform.

Managed by AWS

• Core rule set (CRS) managed rule group
• Known bad inputs managed rule group
• SQL database managed rule group

Managed by m3ter

• Request Body Size Rule:

  • Blocks all HTTP requests having a body larger than 512,000 bytes.

Error Response

If your requests are blocked by any of these rules, a 403 (Forbidden) response is returned.