We are confused with the Managed Rules Toggle for the WAF. The way we read the Toggle Help Text, if the main toggle is OFF, all rules are OFF. However, we have had this toggle OFF, yet our custom rules were enabled and working just fine.
I am wondering if maybe the help text is wrong? If the main Managed Rules toggle is OFF, but we have specific rules, or OWASP rules toggled ON below, are those rules ON, or OFF?
Photo attached for reference: