Problem with URI Query string (WAF rule)

What is the name of the domain?

domain.com

What is the issue you’re encountering

Hello! Help to understand the situation with custom WAF rules: I’m trying to create a rule to skip advertising traffic: contains parameters by utm_* template (for example utm_source). I am writing a test rule: (http.request.uri.query contains “utm_source=yandex”) I look at the logs of the rule and see that the rule also triggers on requests without parameters or with other parameters. I changed the operator to wildcard, changed the field to URI… no change in the result. Translated with DeepL.com (free version)

What is the current SSL/TLS setting?

Full

Screenshot of the error

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.