1.8 KiB
1.8 KiB
WAF Patterns
Choose the workflow that matches the requested outcome, then retrieve its current examples. Make rule scope explicit and review the affected traffic before enforcement.
| Outcome | Documentation |
|---|---|
| Apply managed protection to a zone | Deploy managed rules |
| Change a managed rule's behavior or evaluate it with logging | Override a managed ruleset |
| Enforce an application-specific request policy | Create a custom rule |
| Use attack detection in a request policy | Attack score semantics and availability |
| Protect a login or API endpoint from excessive requests | Rate limiting API examples and counting parameters |
| Exempt narrowly identified traffic from selected protections | Available skip options |
| Adjust protection after a false positive | Managed rules troubleshooting |
For a false positive, identify the matching rule and request scope before choosing an exception or override. Keep the adjustment as narrow as the evidence supports. For combined protections, check WAF phases before deciding where an exception belongs.
Use configuration.md to select the deployment method and api.md to preserve existing rules while changing it.