AllowRaiseIncident Property

Leave it on true if you would like to allow to happen, set it to the default false if you like to prevent the firewall from creating an incident

Syntax

public bool AllowRaiseIncident {get; set;}

Property Value

true if allow; otherwise, false.

Remarks

By setting it to false you will also say that no issue is detected and this can harm other protection pattern recognitions. If you use events, then you are responsible to set it to true and allowing the firewall to block the request

Example

before going live you can use the event to document rules that are capturing false positives.

private void MyFireWall_OnIncident(object? sender, Walter.Web.FireWall.EventArguments.FireWallIncidentEventArgs e)
             {
                 _logger?.Lazy().LogCritical("{Method} {page} : {route}\n   {rule}:{RuleNr}\n   Reasons:{Reason}\n   {data}"
                     , e.Page.Method
                     , e.Page.OriginalUrl.AbsolutePath
                     , e.Page.FireWallRoute
                     , e.StackEntry.Rule
                     , e.StackEntry.RuleNr
                     , e.StackEntry.Reason
                     , string.Join("\n   ", e.Data.Select(s => $"{s.Key}:{s.Value}"))
                     );
            
                 e.AllowRaiseIncident = false;
             }

Requirements

Target Platforms: Windows 7, Windows Vista SP1 or later, Windows XP SP3, Windows Server 2008 (Server Core not supported), Windows Server 2008 R2 (Server Core supported with SP1 or later), Windows Server 2003 SP2

Reference

FireWallIncidentEventArgs Class
FireWallIncidentEventArgs Members
TolerateMaximumViolations Property
TolerateMaximumViolationsIn Property