Get All CC Protections

Retrieves a list of all existing CC Protections.

Request

Request-Line

GET /waap/v1.0/waf/ccProtections HTTP/1.1

Response

Response Body

Parameter	Type	Required	Description
	Array	Mandatory	Array of CC Protection.

Object: CC Protection

Parameter	Type	Required	Description
ruleId	Integer	Mandatory	Unique identifier assigned to the CC Protection Rule.
name	String	Mandatory	Name of the CC Protection.The name must have 1-26 characters. Valid characters: 0-9, A-Z, a-z, space, . (dot), _ (underline), - (hyphen), () (parentheses), * (asterisk) and + (plus sign).
description	String	Optional	The description can have 1-200 characters.
rateLimitTimes	Integer	Mandatory	The maximum number of requests allowed within the specified time.
rateLimitSeconds	Integer	Mandatory	List of website IDs to bind the CC Protection to. At least one ID is required.
metric	String	Mandatory	The strategy used for calculating the metrics. Supported values: IP, User-Agent and Cookie.
cumulativeEnabled	Boolean	Mandatory	Indicates whether cumulative calculation is enabled. If true, the request counts for all paths are aggregated; otherwise, they are calculated individually per path.
paths	String[]	Mandatory	A list of URL paths to which the rule applies. Supports multiple entries and regular expressions.
action	String	Mandatory	The action to take when the rule is triggered. Supported values include Block, Redirect and Pass.
delay	Integer	Mandatory	The delay, in seconds, before applying the configured action after the threshold is reached.
blockValue	Integer	Optional	The HTTP status code to return when the action is set to Block.
redirectValue	String	Optional	The URL or path to which requests are redirected when the action is set to Redirect.
autoWebAclDurationSeconds	Integer	Mandatory	The duration, in seconds, for which the offending IP address remains on the Web ACL once added.
websites	Integer[]	Mandatory	A list of website identifiers to which this rule will be bound.
created	String	Mandatory	Created time in UTC, ISO-8601 format yyyy-MM-dd'T'HH:mm:ss'Z' (no milliseconds). Example: 2025-09-09T17:35:00Z.
updated	String	Mandatory	Updated time in UTC, ISO-8601 format yyyy-MM-dd'T'HH:mm:ss'Z' (no milliseconds). Example: 2025-09-09T17:45:00Z.

Examples

Get All CC Protections

Request

GET /waap/v1.0/waf/ccProtections HTTP/1.1

Successful Response Body

[
    {
        "ruleId": 623000059,
        "name": "qwe",
        "description": "qwe",
        "rateLimitTimes": 100,
        "rateLimitSeconds": 1,
        "metric": "IP",
        "cumulativeEnabled": false,
        "paths": [
            "/test",
            "/qwe"
        ],
        "action": "Block",
        "delay": 0,
        "blockValue": 429,
        "redirectValue": "429",
        "autoWebAclDurationSeconds": 600,
        "websites": [
            481
        ],
        "created": "2025-09-26T04:24:03Z",
        "updated": "2025-09-26T04:58:54Z"
    }
]