In the application web interface window, select one of the following sections:
for global rules, the Rules section;
for workspace rules, the Workspaces section.
If you added a workspace, select one of the following tabs:
Before workspace rules.
After workspace rules.
In the Access groups list, select a group of access rules.
The traffic processing rules table opens.
If there is no group of access rules in the list, you must create one.
Click Add access rule.
The window for adding a rule opens.
Select the General settings tab.
If you want to apply the rule immediately after adding it, select the Enable rule check box.
Select one of the following options in the Action drop-down list:
Deny to add a rule to deny access.
Allow to add a rule to allow access.
Next group to add a transition to the next group of rules.
Redirect to add a rule to redirect the user to a specified URL.
If you selected the Deny option and you want to use a template different from the default access denial template when there is an attempt to open a forbidden resource:
Select the Specify text to display in blocking template check box.
Type the message text.
If you want to add a macro to the message text, select one of the options from the Insert macro drop-down list:
%URL% to add the URL of the blocked website.
%RULE_NAME% to add the name of the traffic processing rule.
%APPLICATION% to add the application name.
%DATE% to add the date and time when the traffic processing rule came into force.
If you selected the Allow option and want to remove the Range HTTP header, select the Delete Range HTTP header check box.
IF the check box is selected, all objects are loaded completely for subsequent scanning using protection rules. Partial loading of objects is not possible in this mode.
If you selected the Redirect option, in the Redirect URL box, enter the URL to which the original request must be redirected.
In the Rule name box, type the name of the access rule.