Get All CC Protection Rules

Retrieve a list of all existing CC Protections.

Request

Request-Line

GET /waap/v1.0/waf/ccProtections HTTP/1.1

Response

Response Body

Parameter	Type	Required	Description
	Array	Mandatory	Array of CC Protection.

Object: CC Protection

Parameter	Type	Required	Description
ruleId	Integer	Mandatory	Unique identifier assigned to the CC Protection Rule.
name	String	Mandatory	Name of the CC Protection.The name must have 1-26 characters. Valid characters: 0-9, A-Z, a-z, space, . (dot), _ (underline), - (hyphen), () (parentheses), * (asterisk) and + (plus sign).
description	String	Optional	The description can have 1-200 characters.
rateLimitTimes	Integer	Mandatory	The maximum number of requests allowed within the specified time.
rateLimitSeconds	Integer	Mandatory	List of website IDs to bind the CC Protection to. At least one ID is required.
metric	String	Mandatory	The strategy used for calculating the metrics. Supported values: IP, User-Agent and Cookie.
cumulativeEnabled	Boolean	Mandatory	Indicates whether cumulative calculation is enabled. If true, request counts are aggregated across all paths; if false, counts are calculated per path. Default is true if omitted.
paths	String[]	Mandatory	A list of URL paths to which the rule applies. Supports multiple entries and regular expressions.
action	String	Mandatory	Defines the operation executed when the rule is triggered. Supported values include Block, Redirect and Pass.
delay	Integer	Mandatory	The delay, in seconds, before the configured action is applied after the threshold is reached.
blockValue	Integer	Optional	The HTTP status code to return when the action is set to Block.
redirectValue	String	Optional	The URL or path to redirect requests to when the action is configured as Redirect.
autoWebAclDurationSeconds	Integer	Mandatory	The duration, in seconds, for which an offending IP address remains in the Web ACL after being added.
websites	Integer[]	Mandatory	List of website identifiers to which this rule is bound.
created	String	Mandatory	Created time in UTC, ISO-8601 format yyyy-MM-dd'T'HH:mm:ss'Z' (no milliseconds). Example: 2025-09-09T17:35:00Z.
updated	String	Mandatory	Updated time in UTC, ISO-8601 format yyyy-MM-dd'T'HH:mm:ss'Z' (no milliseconds). Example: 2025-09-09T17:45:00Z.

Examples

Get All CC Protection Rules

Request

GET /waap/v1.0/waf/ccProtections HTTP/1.1

Successful Response Body

[
    {
        "ruleId": 623000059,
        "name": "qwe",
        "description": "qwe",
        "rateLimitTimes": 100,
        "rateLimitSeconds": 1,
        "metric": "IP",
        "cumulativeEnabled": false,
        "paths": [
            "/test",
            "/qwe"
        ],
        "action": "Block",
        "delay": 0,
        "blockValue": 429,
        "redirectValue": "429",
        "autoWebAclDurationSeconds": 600,
        "websites": [
            481
        ],
        "created": "2025-09-26T04:24:03Z",
        "updated": "2025-09-26T04:58:54Z"
    }
]