You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/waf/reference/legacy/old-waf-managed-rules/index.mdx
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -52,7 +52,7 @@ When viewing a ruleset, Cloudflare shows default actions for each rule listed un
52
52
***Disable**: Turns off the specific rule within the group.
53
53
***Block**: Discards the request.
54
54
***Interactive Challenge**: The visitor receives a challenge page that requires interaction.
55
-
***Simulate**: The request is allowed through but is logged in [**Sampled logs**](/waf/analytics/security-events/#sampled-logs).
55
+
***Simulate**: The request is allowed through but is logged in [Sampled logs](/waf/analytics/security-events/#sampled-logs).
56
56
57
57
Cloudflare’s [WAF changelog](/waf/change-log/) allows customers to monitor ongoing changes to the Cloudflare Managed Ruleset.
58
58
@@ -66,7 +66,7 @@ After OWASP evaluates a request, Cloudflare compares the final score to the **Se
66
66
67
67
***Block**: The request is discarded.
68
68
***Challenge**: The visitor receives an interactive challenge page.
69
-
***Simulate**: The request is allowed through but is logged in [**Sampled logs**](/waf/analytics/security-events/#sampled-logs).
69
+
***Simulate**: The request is allowed through but is logged in [Sampled logs](/waf/analytics/security-events/#sampled-logs).
70
70
71
71
The sensitivity score required to trigger the WAF for a specific **Sensitivity** is as follows:
72
72
@@ -80,7 +80,7 @@ For AJAX requests, the following scores are applied instead:
80
80
***Medium**: 80 and higher
81
81
***High**: 65 and higher
82
82
83
-
Review the entry in [**Sampled logs**](/waf/analytics/security-events/#sampled-logs) for the final score and for the individual triggered rules.
83
+
Review the entry in [Sampled logs](/waf/analytics/security-events/#sampled-logs) for the final score and for the individual triggered rules.
84
84
85
85
### Control the OWASP package
86
86
@@ -99,7 +99,7 @@ Cloudflare recommends initially setting the sensitivity to *Low* and reviewing f
99
99
100
100
:::note
101
101
102
-
**Sampled logs** displays rule ID `981176` when a request is blocked by OWASP. Also, some OWASP rules listed in **Sampled logs** do not appear in the OWASP list of rules because disabling those rules is not recommended.
102
+
Sampled logs displays rule ID `981176` when a request is blocked by OWASP. Also, some OWASP rules listed in Sampled logs do not appear in the OWASP list of rules because disabling those rules is not recommended.
Copy file name to clipboardExpand all lines: src/content/docs/waf/reference/migration-guides/waf-managed-rules-migration.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -308,7 +308,7 @@ The returned configuration in the example above, which would match the existing
308
308
}'
309
309
```
310
310
311
-
After invoking this API endpoint, both WAF managed rules and WAF Managed Rules will be enabled. Check [**Sampled logs**](/waf/analytics/security-events/#sampled-logs) in Security Events for any legitimate traffic getting blocked, and perform any required adjustments to the WAF Managed Rules configuration. For example, you can [add an override](/ruleset-engine/managed-rulesets/override-managed-ruleset/) for a single rule that disables it or changes its action.
311
+
After invoking this API endpoint, both WAF managed rules and WAF Managed Rules will be enabled. Check [Sampled logs](/waf/analytics/security-events/#sampled-logs) in Security Events for any legitimate traffic getting blocked, and perform any required adjustments to the WAF Managed Rules configuration. For example, you can [add an override](/ruleset-engine/managed-rulesets/override-managed-ruleset/) for a single rule that disables it or changes its action.
312
312
313
313
4. To finish the migration and disable WAF managed rules, set the configuration for the new WAF using the settings you obtained in step 2 and possibly adjusted in step 3. Make sure you include the `waf_migration=pending&phase_two=1` query string parameters.
Copy file name to clipboardExpand all lines: src/content/docs/waf/tools/validation-checks.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,7 +13,7 @@ Currently, you cannot disable validation checks. They run early in Cloudflare's
13
13
14
14
## Event logs for validation checks
15
15
16
-
Actions performed by the Validation component appear in the **Sampled logs** of [Security Events](/waf/analytics/security-events/) associated with the `Validation` service and without a rule ID. Event logs downloaded from the API show source as `Validation` and action as `drop` when this behavior occurs.
16
+
Actions performed by the Validation component appear in [Sampled logs](/waf/analytics/security-events/#sampled-logs) in Security Events, associated with the `Validation` service and without a rule ID. Event logs downloaded from the API show source as `Validation` and action as `drop` when this behavior occurs.
17
17
18
18
The following example shows a request blocked by the Validation component due to a malformed `User-Agent` HTTP request header:
Copy file name to clipboardExpand all lines: src/content/release-notes/waf-general.yaml
+1-1Lines changed: 1 addition & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -18,7 +18,7 @@ entries:
18
18
- publish_date: "2024-11-14"
19
19
title: Security Events pagination
20
20
description: |-
21
-
Fixed an issue with pagination in Security Events' **Sampled logs** where some pages were missing data. Also removed the total count from the events log as these are only sampled logs.
21
+
Fixed an issue with pagination in Security Events' Sampled logs where some pages were missing data. Also removed the total count from the events log as these are only sampled logs.
22
22
- publish_date: "2024-11-04"
23
23
title: New table in Security Analytics and Security Events
0 commit comments