Is 'Security' -> 'WAF'-> 'Custom rules' being deprecated?

We currently use Web Application Firewall to set custom rules for JS challenges for bots (we navigate to these settings by clicking through from our main dashboard ‘Security’ → ‘WAF’ → ‘Custom rules’).

  • However we have seen that ‘Web Application Firewall’ is now deprecated as part of Page Rules (important: this product is deprecated, read more here https://developers.cloudflare.com/rules/reference/page-rules-migration/) being deprecated (see link here).

  • Are the Web Application Firewall custom rules set within Security → WAF being deprecated? Or is this deprecation related to some other different type of Web Application Firewall within Page Rules (important: this product is deprecated, read more here https://developers.cloudflare.com/rules/reference/page-rules-migration/)? Thanks!

So we are only deprecating legacy Web Application Firewall setting under Rules > Page Rules (important: this product is deprecated, read more here https://developers.cloudflare.com/rules/reference/page-rules-migration/) as part of this Rules deprecation project.

That one legacy WAF setting only controls the previous version of WAF managed rules, and has no impact on new Custom Rules you are referencing, hence it is going away together with the legacy Rules to make way for a better WAF > Custom Rules experience.

2 Likes

Brilliant. Thank you!

1 Like

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.