Which WAF rule blocks outlook

waf

#1

Hi,

When I enable WAF with the “Cloudflare Specials” ruleset enabled, my outlook client disconnects from my exchange server (which is behind Cloudflare).

There are 105 rules in that ruleset, but which rule is responsible for blocking outlook?
I can’t realy make out from the rule names which one is responsible.


#2

Often a request will be blocked based on the cumulative score of multiple rules (sometimes just one to be sure). Take a look at the Traffic tab section firewall events and the details of a particular block event will tell you the rule(s) which triggered the response and the match portion can tell you what part of a query may be causing the rule(s) to fire.


#3

Ah thanks,
this one is responsible: 100011 Request arguments containing NULL byte