On this page you will find two configuration tables as follows:
The Firewall ACL is similar to those you may be familiar with on most firewall appliances or even software firewalls such as iptables. It allows you to configure ALLOW and DENY rules grouped on the destination IP, which is the cloud IP you publish your config/pack on.
The WAF allows you to create policies to inspect traffic all the way up to layer 7. You can block URLs or directories, look for credit card numbers escaping your network, block SQL Injection attempts and more.