WAF rules and the Analytics Page

Does the overview page display traffic before or after the firewall rule applies? My use case is that I’m hosting a small subset of sites for friends and family. I’ve allowlisted them and set a WAF rule to block all other traffic, but the overview still shows me serving hundreds of unique visitors and thousands of requests. This might simply be that it is showing all inbound traffic regardless of whether a WAF rule filtered it out or not.

For example let’s say there are 3 visitors with IP’s X, Y and Z. Let’s also say I have a WAF rule to block all traffic from Y and Z.

Would the overview show 3 unique visitors or 1 unique visitor?

Hello there, you are right!

The overview analytics shows a sample of all inbound traffic. You can see who is being blocked in the fire wall events.