Review of WAF custom rules via API

I am seeing custom waf rules set set up for one of my zones on UI, but I am unable to retrieve this info via the API. I am using the following endpoint https://api.cloudflare.com/client/v4/zones/{zone_id}/rulesets but the info in the response does not look like the rules seen in the UI

Erisa•3/1/24, 4:10 PM

That endpoint only lists the rulesets, you need to also list the rules that are within that ruleset

fOP•3/1/24, 4:37 PM

so then i would need to hit this endpoint curl https://api.cloudflare.com/client/v4/zones/{zone_id}/rulesets/{ruleset_id}

fOP•3/1/24, 4:37 PM

for instance id like to see this custom rule

Ff so then i would need to hit this endpoint curl https://api.cloudflare.com/client...

Erisa•3/1/24, 5:09 PM

Yes

fOP•3/1/24, 5:10 PM

thanks Erisa!

fOP•3/14/24, 7:48 PM

Hi Erisa, wondering if you could help me retrieve some other waf configs from the api :blob_sweat:

fOP•3/14/24, 8:08 PM

Wondering if u know how to retrieve cloudflare waf managed ruleset and also the owasp mod security

Erisa•3/15/24, 9:46 AM

It is the same concept but with a different phase name

fOP•3/15/24, 12:33 PM

Gotcha is just that for instance joomla is disabled on our managed ruleset , but I see joomla sqli enabled and other joomla related vulns for some reason

Review of WAF custom rules via API

Similar Threads

Similar Threads

Similar Threads