Cloudflare - Advanced security (Web Application Firewall)

rdn · Jan 27, 2015

Does someone enable this on your XenForo based forum?
Any reviews and experience?

HappyWorld · Feb 1, 2015

I have tried that but on vb, not xf .. yet.

rdn · Feb 1, 2015

semprot said:
I have tried that but on vb, not xf .. yet.

So far it doesn't block legit request?

HappyWorld · Feb 1, 2015

RoldanLT said:
So far it doesn't block legit request?

When i let it run for +- 1 week, there is no "hit" on each rule in WAF.
So it seems no "malicious" request had been received by the WAF

And i turned it off now.

m1ne · Feb 1, 2015

I've had around 2000 hits, mostly from OWASP XSS Attacks rules. Running on low sensitivity.

rdn · Jul 6, 2015

I'm running HIGH Sensitivity now

m1ne · Jul 9, 2015

Getting lots of hits to admin.php lately and CF is blocking them like a boss.

m1ne · Jul 9, 2015

Btw Roldan, do you have HSTS enabled?

rdn · Jul 9, 2015

Solidus said:
Btw Roldan, do you have HSTS enabled?

I have mine disabled.
Like this:

Cause I offer HTTP/HTTPS as an option to my users.

We value your privacy