| Name | Description | |
|---|---|---|
 | BlockBadRequestDuration | Blocking duration configuration for requests that make no sense like phishing and penetration attempts. |
| BlockCSPViolatiorsDuration | Blocking duration configuration for users (normally humans) that generate CSP violations (send by browsers like Chrome, Firefox etc based on user activity) |
| BlockDuration | Default Blocking duration configuration |
| ShowBlockingRule | Show the rule used if a blocking was triggered, leaking the reason of the blocking allows malicious uses to probe for vulnerabilities and should only be used when troubleshooting issues when your application does something that is not compatible with the firewall. |
| StatusCode | Status code you would like to generate on a given violation |
| StatusMessage | The status message returned when the firewall blocks a request. |
| TrackBlockedUsers | This state that you'd like to track users, doing so will discover users that behave strange and allows for pattern recognition to help detect intruders |
| TransferRequestTo | A default value for redirects. Set the relative Uri ("~/controller/action") or a absolute Uri ("https://www.somedomain.com") to transfer blocked request to, if empty or null the request will stop processing and just return a white page. |