February 28, 2023

Ruleset	Policy	Description of Update	Previous Action	New Action
WAF & OWASP Top Threats	SQL Injection	The policy was updated to detect additional SQL and NO-SQL injections and to improve detection accuracy	Block	Block
WAF & OWASP Top Threats	XSS Attack	The policy has been improved to reduce false positives	Block	Block
CMS Protection	Whitelist WordPress admin logged-in users	This policy was updated to improve the detection of logged-in WordPress admins	Allow	Allow
Anti Automation & Bot Protection	Force Browser Validation on Traffic Anomalies	This policy has been updated to challenge clients who preset multiple invalid extensions string	Composite	Composite