Peakhour.IO - WAF Tuning

How to Tune F5 BIG-IP Advanced WAF

AC — Wed, 29 Jul 2026 10:15:00 +1000

Run F5 BIG-IP Advanced WAF in Transparent mode, review staged matches and learning suggestions, and limit each exception to the URL, parameter, cookie or content profile that needs it.

How to Tune Google Cloud Armor WAF Rules

AC — Wed, 29 Jul 2026 10:00:00 +1000

Tune Cloud Armor preconfigured WAF rules with preview traffic, versioned signatures, sensitivity levels, field exclusions and policy priority.

How to Tune Cloudflare WAF When Rule 949110 Blocks a Request

AC — Wed, 29 Jul 2026 09:45:00 +1000

Trace a Cloudflare OWASP anomaly-score block to the rules that raised the score, then choose the right override or exception.

How to Tune Azure Application Gateway WAF

AC — Wed, 29 Jul 2026 09:30:00 +1000

Start Azure Application Gateway WAF in Detection mode, find false positives in Log Analytics, narrow each exclusion and move into Prevention mode.

How to Tune AWS WAF with Count, Labels and Rule Priority

AC — Wed, 29 Jul 2026 09:15:00 +1000

Use Count overrides, managed-rule labels and rule priority to fix AWS WAF false positives while keeping the rest of the managed rule group in force.

How to Tune Coraza on Caddy

AC — Wed, 29 Jul 2026 09:00:00 +1000

Run Coraza and OWASP CRS on Caddy in DetectionOnly, read the audit log and limit each exclusion to the field and route that need it.

How to Tune Your WAF Without Turning It Off

AC — Tue, 28 Jul 2026 10:30:00 +1000

A practical process for running a CRS-based or managed WAF in detection mode, finding repeatable false positives and writing narrow exceptions that survive real application traffic.