4 ms·
Your best plan is to start with all the rules in count mode. Let that sit for awhile and analyze anything that was counted. As you feel good about it, slowly
by CubsFan1060 3y ago
Your best plan is to start with all the rules in count mode. Let that sit for awhile and analyze anything that was counted. As you feel good about it, slowly start to move things into block.
- mango7283 3y agoProblem is when you get owned during that window and get slammed for not blocking sooner. Then you block sooner and get slammed for blocking too soon. Repeat for 1000 web services.
- CubsFan1060 3y agoYeah. Sadly the WAF can't solve organizational problems.