Skip to content

Commit 8683d49

Browse files
Update content/includes/nap-waf/config/common/ip-groups-override-rules.md
Co-authored-by: Alan Dooley <[email protected]>
1 parent 09ab5b8 commit 8683d49

File tree

1 file changed

+6
-3
lines changed

1 file changed

+6
-3
lines changed

content/includes/nap-waf/config/common/ip-groups-override-rules.md

+6-3
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,10 @@
11
#### IP-Groups feature as part of Override Rules feature.
2-
The Override Rules feature allows overriding of the original or parent policy settings.
3-
This can be done by defining override rules in the designated section, based on specific override conditions.
4-
Override rule condition with IP group based on JSON schema defined by the declarative policy and applied to "clientIp" attribute using “matches” function.
2+
The Override Rules feature allows you to modify original or parent policy settings.
3+
4+
Rules are defined using specific conditions, which can include an IP group based on the declarative policy JSON schema.
5+
6+
When triggered, the rule is applied to the _clientIp_ attribute using the _matches_ function.
7+
58
'clientIp.matches(ipAddressLists["standalone"])'
69

710
Here is a policy example:

0 commit comments

Comments
 (0)