As mentionned before, I have my WAF temporarily configured in monitor mode ! Now I wish to know what kind of traffic will be blocked , when I would switch over in rejected mode ! It is not because there is a ruleID that traffic will be blocked. http error 403 is converted into http error 200 in monitor mode. How to find out what kind of traffic will be blocked ?
As mentionned before, I have my WAF temporarily configured in monitor mode ! Now I wish to know what kind of traffic will be blocked , when I would switch over in rejected mode ! It is not because there is a ruleID that traffic will be blocked. http error 403 is converted into http error 200 in monitor mode. How to find out what kind of traffic will be blocked ?