Hi Aresh,

It is ok to skip the rules if you are sure about the false positive. You can create a support case later to verify it.

Thanks,

Hi,

The only way that I think is false positive is that I can see the IP address of my own connection triggering the ID.

But skip the rules will leave the website open to attacks that those rules should stop them.

What would the support do in such cases?

Thanks

Is your IP address static? Then you can create an exception, select "Web clients coming from these source networks" and configure your IP address.

Also: Please don't skip infrastructure rules to fix false positives. Find the non-infrastructure rules in reverseproxy.log that are actually causing the false positives and skip those instead. Read more about it in this knowledge base article.

thanks for reply

I agree with you on not skip those rules.

I cannot create exception be cause costumer excpect to access the website from any location.

thanks for reply

I agree with you on not skip those rules.

I cannot create exception be cause costumer excpect to access the website from any location.