This expression in WAF is supposed to challenge all traffic from this ASN with HTTP/1.1. Still not being mitigated. Why is that? (ip.src.asnum eq 8075 and http.request.version eq “HTTP/1.1”)
What is the current SSL/TLS setting?
Full
What are the steps to reproduce the issue?
See attached confirmation that IP not being mitigated.
The request was redirected (301), likely the request was made over http and was redirected to https on Cloudflare.
If the request was then made to https and you are challenging all requests in the WAF, then it would be challenged for that request. I see a challenge for https on your site.
Ok got it.
For that ASN rule, if traffic is redirected as https, then it wont be challenged.
Should I edit that rule to challenge all traffic from the ASN?
