3 ms·
Do AWS and Cloudflare allow you to correct their false-positives? any other 3rd party WAFs worth considering?
by gingerlime 4y ago
Do AWS and Cloudflare allow you to correct their false-positives? any other 3rd party WAFs worth considering?
- knodi 4y agoSadly no, you can disable an AWS provided rule but that may have other issues like you lose all detection for that attack vector. With AWS WAFv2 you can have custom rules with logic that lives in lambdas, the lambda is invoked every WAF request for evaluation based on the logic in the lambda. There are few options on AWS marketplace such as Fortinet and F5 WAF rules. Fortinet is the better of the 2 and newer.