Secure Private Access (ZPA)
About Custom Controls
All AppProtection profiles have a set of AppProtection controls that you can use to help you define how AppProtections are managed. To learn more, see About AppProtection Controls.
Custom controls give you the flexibility to set and define the specific request and response elements (e.g., request header, response body, etc.) and the preferred action used to handle them. You can create multiple custom controls and use them within the same AppProtection profile.
Custom controls enhance your experience by enabling you to:
- Create highly tailored custom controls based on specific requests or response elements.
- Create the description, set the severity level, and set the default action for each custom control.
About the Custom Controls Page
On the Custom Controls page (Configuration & Control > Security > AppProtection Controls > Custom Controls), you can do the following:
- View more information about the predefined controls.
- Expand all the rows in the table to see more information about each custom control.
- Add a new Custom Control.
- Filter the information that appears in the table. By default, no filters are applied.
- View a list of all configured custom controls:
- Control Number: A number to differentiate each custom control. The table shows the controls in the order they were created, and the order cannot be changed. When expanded, the following information is displayed:
- Description: An explanation of how the control works.
- Paranoia Level: The associated level, which corresponds to the levels available in an AppProtection profile.
- Used in AppProtection Profiles: The AppProtection profiles using the custom control.
- Expression: The way the custom control is defined.
- Name: The name of the custom control.
- Control Type: A list of the elements that make up this custom control.
- Severity: The level of security concern the custom control has.
- Control Action: The action ZPA uses for this custom control.
- Control Number: A number to differentiate each custom control. The table shows the controls in the order they were created, and the order cannot be changed. When expanded, the following information is displayed:
- Edit a custom control.
- Delete a custom control.
When a custom control is in use by an AppProtection profile, it cannot be deleted.
- Go to the ThreatLabZ Controls page to view the available predefined controls.
- Go to the OWASP Predefined Controls page to view the available predefined controls.
- Go to the WebSocket Controls page to manage your WebSocket predefined and custom controls.
- Go to the API Controls page to view your API controls.
- Go to the Security Profiles page to create and manage AppProtection Profiles and Browser Protection Profiles.
