Hi guys! I have a question regarding the WAF Managed Ruleset. When you have a paid plan such as business or enterprise, is the
1.) Cloudflare Managed Ruleset and
2.) OWASP Mod Security Package
on by itself or do you have to “enable” both of them (separately) or are they automatically running in those plans? I understand that you have to configure the custom WAF rules yourself but not sure about the other two.
Thanks in advance for your help!