I have gone through the steps in the documentation for configuring WAF and the rule's traffic count increases accordingly when the web server is accessed. However, I can't seem to be able to verify that it is actually being protected. Almost all protection…

Is there a service in Sophos XG that automatically blocks the ip of the client that is trying to brute force access a web server? That is, if there is, what can be an effective way to prevent brute force attacks on, for example, an apache server that…