Block
- Blocking an attack will stop any action before it is posted to your website. It may also stop legitimate traffic if the rule set is too broadly defined.
Challenge
- If you are unsure whether suspicious web visitor behavior is illegitimate traffic, you can set up a challenge page. This page asks visitors to submit a CAPTCHA successfully to continue their action. If the web visitor fails the challenge, they will be blocked from your website.
Real-time reporting
- Robust logging lets you see what’s happening instantaneously. Reporting on WAF events shows what actions have been taken in response to rules that you have set up. Search by IP, IP address or rule ID to narrow down to a specific WAF event for further fine-tuning.