Configuring Request Risk Scores

Risk Scores can be configured on the SECURITY POLICIES > Risk Scores page.

1. Under the Action Policy - Risk Scores section:

   1. Select the check box(es) next to the Attack Action Name (ID) and click Bulk Edit.
2. On the Edit Attack Action page, in the Edit Attack Action section:
   1. Select the Risk Score check box, and set the risk score value (Low, Medium, Elevated, High or Critical) as required. 

   2. Click Save.

The corresponding values configured for Request Risk Score and Client Risk Score are displayed on the Access Logs/Web Firewall Logs > Details page. The Request Risk Score and Client Risk Score fields are also displayed when a CSV is generated. To view these fields while exporting logs on an external Syslog server or FTP server, configure %rrs for Request Risk Score and %crs for Client Risk Score on the Export Logs > Custom Log Format page.

For detailed information about risk score, see Risk Scoring.