Action Property (GuardActionEventArgs)

The guard action being recommended by the firewall

Syntax

public GuardAction Action {get;}

Remarks

This is the recommendation for the given request, you can't change it but you can prevent it by setting AllowGuardAction to false (not the default)

If you like a redirect rather than a you need to update the annotation of your endpoint using the redirect rule you intend to be applied. The Violation stack contains the Modules that raised a incident, these modules would need to be provided with a redirect configuration.

Example

You can interact with the action based on your own application work-flows. the bellow sample shows that users that are found to be spoofing are blocked for at-least 1 year

private void FireWall_OnGuardAction(object sender, GuardActionEventArgs e)
            {
                if (e.Page.User.AsFirewallUser().IsSpoofing)
                {
                    foreach (var item in e.Page.Incidents())
                    {
                        item.Expires = Inverse.Clock().UtcNow.AddDays(300);
                    }
                }
                e.AllowGuardAction = true;
            }

Requirements

Target Platforms: Windows 7, Windows Vista SP1 or later, Windows XP SP3, Windows Server 2008 (Server Core not supported), Windows Server 2008 R2 (Server Core supported with SP1 or later), Windows Server 2003 SP2

Reference

GuardActionEventArgs Class
GuardActionEventArgs Members
ViolationsStack Property