Managed Challenge Blocks fav.ico Requests

I have “Managed Challenge” set as my final WAF rule and it is consistently blocking requests for fav.ico.

See attachments for a typical example.

Any suggestions?

2nd image

It looks like you have a rule called “Allow”, but it’s set as a Managed Challenge. It should be a Skip for All Remaining Custom Rules, and be at the top of your Firewall Rules list.

Correct, it is rule 4 of 4 and anyone that passes the managed challenge is (intended to be) fine to access the site.

I want all users to be sequentially evaluated against WAF rule 1, 2, 3, and 4 and permitted only if they pass all 4. Skip will achieve that, not allow?

Thanks.