WAF Custom rule VS Super Bot Fight Mode

Website, Application, Performance Security
1

What is the name of the domain?

https://example.com

What is the issue you’re encountering

The rule order shows bot rules processed before waf custom rules.

What steps have you taken to resolve the issue?

When I view the order of processing rules bot rules show first before waf rules. But in a waf custom rule there is an option to skip sbfm rules. I am on a paid plan. Does that work as expected or will sbfm rules still be processed before waf rules?

What is the current SSL/TLS setting?

Full (strict)

2

See this more complete documentation on the various phases of Cloudflare’s products and their order of processing… which should clarify things for you.

2 Likes
3

Ahh, Thats very helpful. It looks like the order is custom waf rules, bot rules, managed waf rules. Thats not clear with the flow diagram in the Cloudflare backend so thank you for the extra information.

1 Like