July 12, 2022

Ruleset	Policy	Description of Update	Previous Action	New Action
WAF & OWASP Top Threats	XSS Attack	This policy has been updated to improve protection against additional attack vectors	Block	Block
Behavioral WAF	Probing and Forced Browsing	This policy has been updated to detect malicious TLS fingerprinting	Composite	Composite
Anti-Automation & Bot Protection	Automated Clients	This policy has been updated to detect malicious TLS fingerprinting	Composite	Composite
Protocol Validation	Prevent Malformed Request Methods	Introducing a new policy that enforces HTTP RFC requirements that state how the client must send a request method	NA	Block
WAF & OWASP Top Threats	Code Injection	This policy now covers additional Java, PHP, Ruby, Python, Linux, and Windows injection attacks	Block	Block