{"id":1082,"date":"2020-05-28T11:06:00","date_gmt":"2020-05-28T10:06:00","guid":{"rendered":"https:\/\/42crdev.prexihost.com\/?p=1082"},"modified":"2023-02-15T16:49:08","modified_gmt":"2023-02-15T16:49:08","slug":"tutorial-api-firewall-protection-reports","status":"publish","type":"post","link":"https:\/\/staging2022.42crunch.com\/tutorial-api-firewall-protection-reports\/","title":{"rendered":"API Protect Micro API Firewall Reports and Troubleshooting"},"content":{"rendered":"\n\n\t<p>Tutorials<\/p>\n\n\t<section>\n<section>\n<p>You&#8217;ve seen how 42Crunch can protect your APIs and microservices &#8211; now let&#8217;s review reporting.<\/p>\n<\/section>\n\n<\/section>\n\t<iframe loading=\"lazy\" width=\"1110\" height=\"624\" src=\"https:\/\/www.youtube.com\/embed\/utUMYkCe8lY\" title=\"YouTube video player\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen><\/iframe>\n<h2>\n\t\tViewing Transaction Logs\n\t<\/h2>\n<p>At any time, you can click on transaction logs to view all failed transactions found by the conformance scan and review the full list.<\/p>\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/04\/failed-transactions-Custom-1024x513.png\" alt=\"failed-transactions (Custom)\" itemprop=\"image\" height=\"513\" width=\"1024\" title=\"failed-transactions (Custom)\" onerror=\"this.style.display='none'\"  \/>\n<h2>\n\t\tLook up a Specific Error\n\t<\/h2>\n\t<section>\n<p>So one thing that I want to show first is how you can troubleshoot and see that specific transactions that get blocked. Sometimes you can have legitimate users and maybe your partners, your other teams who might have been using your APIs incorrectly &#8211; and might have started relying on some sort of hacks of your APIs and using the APIs in a way that you wouldn&#8217;t expect. And they might call you and complain that something that used to work, no longer works. All you need to do is ask them for that transaction ID.<\/p>\n<p>Now you can easily go into the 42Crunch console and use that ID to look up the specific transaction and drill down into the details of what went wrong.<\/p>\n<p>Click on Transaction Logs, then paste the ID into the search bar. You will see what exactly happened, what exactly failed and why. You will get detailed information for the requests coming in, and then if response was blocked &#8211; what happened to the response.<\/p>\n<\/section>\n<h2>\n\t\tNon-blocking Mode\n\t<\/h2>\n<p>There&#8217;s a setting to run the firewall in nonblocking mode. This is something that you can use when you don&#8217;t yet want to enable the protection, but you want to start getting reports on all the calls that are outside of the contract. So maybe if you are not comfortable yet to start enforcing the protection and you want to just figure out who is using your APIs incorrectly outside of a contract, you can run it in non-blocking mode and see those calls before you enable the protection.<\/p>\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/04\/4-audit-report-Custom-1024x576.png\" alt=\"4-audit-report (Custom)\" itemprop=\"image\" height=\"576\" width=\"1024\" title=\"4-audit-report (Custom)\" onerror=\"this.style.display='none'\"  \/>\n<h2>\n\t\tSecurity Dashboard\n\t<\/h2>\n\t<section>\n<p>You can click on &#8216;Security Dashboard&#8217; to view overall reporting to see how your APIs are being used.<\/p>\n<\/section>\n\n","protected":false},"excerpt":{"rendered":"<p>Learn how to read the API Protect reports, view transaction logs, lookup details on specific errors, enable non blocking mode and use the security dashboard.<\/p>\n","protected":false},"author":4,"featured_media":12267,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"none","_seopress_titles_title":"API Protect Security Reports explained","_seopress_titles_desc":"Learn how to read the API Protect reports, view transaction logs, lookup details on specific errors, enable non blocking mode and use the security dashboard.","_seopress_robots_index":"","site-sidebar-layout":"default","site-content-layout":"default","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"disabled","ast-hfb-above-header-display":"disabled","ast-hfb-below-header-display":"disabled","ast-hfb-mobile-header-display":"disabled","site-post-title":"disabled","ast-breadcrumbs-content":"disabled","ast-featured-img":"disabled","footer-sml-layout":"disabled","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[11],"tags":[22,16,33],"class_list":["post-1082","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tutorials","tag-api-security-platform","tag-api-security-training","tag-api-protection"],"_links":{"self":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/posts\/1082"}],"collection":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/comments?post=1082"}],"version-history":[{"count":0,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/posts\/1082\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/media\/12267"}],"wp:attachment":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/media?parent=1082"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/categories?post=1082"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/tags?post=1082"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}