Managed Responses
Rules that act when something happens, including blocking addresses.
- Managed Responses: what they areRules that say what should happen when an incident opens, and then make it happen.
- The default responseThe built-in response that makes sure someone is always alerted.
- When a response runsIncident kinds, conditions, and how often a response may repeat.
- Block addresses in CloudflareAdd the address behind an alert to a Cloudflare IP list for a while, then remove it again.
- Block addresses in AWS WAFAdd the address behind an alert to an AWS WAF IP set for a while, then remove it.
- Block addresses in Google Cloud ArmorAdd a deny rule for the address behind an alert to a Cloud Armor security policy for a while, then remove it.
- Block addresses in Azure Front Door WAFAdd the address behind an alert to one rule in an Azure Front Door WAF policy for a while, then remove it.
- Practice mode, approvals and safety limitsHow to try a blocking response safely, and the protections that always apply.
- Blocked addresses and removing blocksSee what is blocked now, remove a block early, and fix a block that did not clear.
- Approve a response from SlackApprove or reject a response that is waiting for a person, with a button in Slack.