are these duplicates between owasp and CF ruelset
in owasp: 920330: Empty User Agent Header and 920320: Missing User Agent Header
in CF ruleset: Anomaly:Header:User-Agent - Empty and Anomaly:Header:User-Agent - Missing
any benefit of applying in both ?
or i minght be only causing delay and consume more computational resources
I just noticed that in the old version of managed rules, we can simply choose not to duplicate
“This ruleset should only be enabled if the WordPress CMS is used for this domain. It contains additional rules that complement the technology-specific protections provided by similar rules in the OWASP ruleset”
While in the new managed rules, i cant find a way other than maybe go one by one ??? how can we avoid duplications ?