UPLOAD POLICY
URL Upload Policy Settings
[POLICY] > (Select Domain Group) > [SET POLICY] > URL POLICY > (Select URL) > [UPLOAD]
Configures policies to block or allow uploads of specific files by inspecting file extensions when a client uploads files to the web server. This can prevent the upload of malicious script files like Webshells or unnecessary files.
- Upload Template Management: Extension groups used in the policy are configured in the
[TEMPLATE] > [UPLOAD POLICY]menu. For details, please refer to the Upload Policy page.
How to Configure: 1. Select the target URL from the 'Policy URL List' on the left. 2. Select [UPLOAD] from the tab menu on the top right, then click the [SET POLICY] button. 3. Select the extension group (or individual extension) to apply, configure the action, and click [SAVE].
| Item | Description |
|---|---|
| ID | The unique identification ID of the security pattern (or pattern group). |
| PATTERN | Select the File Extension Pattern to apply to the policy. You can select an entire pattern group from the tree structure list or select individual extensions under it. |
| RISK | Displays the risk level (High/Medium/Low) of the corresponding pattern. • System Pattern: The default risk level provided by DeepFinder is applied. • User Pattern: The risk level set by the administrator when creating the pattern is displayed. |
| ACTION | Select the action to take upon policy violation (upload of specified extension). • NONE: Does not apply the policy. • ALLOW: Allows upload, skips lower priority rule inspections within the current policy, and moves to the next stage of security policy. • DENY: Blocks upload immediately. • REDIRECT: Blocks access and redirects to a specified page. • DETECT: Records a detection log only and continues to inspect the next policy without blocking. |
| LOG TYPE | Select the detail level of the log to be recorded upon detection. (NONE / LOW / FULL) |
URL Upload Policy Priority Settings
[POLICY] > (Select Domain Group) > [SET POLICY] > URL POLICY > (Select URL) > [UPLOAD] > [SET POLICY] > (Adjust Priority)
Changes the inspection order between registered upload policies. The lower the priority number (closer to 1), the earlier it is inspected. After adjusting the order, click [SAVE] to save the settings.
