fadaly.net/work/wafrulepolicy
NETWORK SECURITY
HYGIENE.
32 WAF rules across OWASP CRS 4.x and custom.
4 firing false positives above 15%.
1 hasn't fired in 18 months.
The rules nobody decided to retire.
CRS PL=4 · paranoia level 4
COUNT 180D
Stuck in count-mode 180 days at 42% false-positive rate.
Demote to log-only and revisit in 30 days.