Scoring, Threshold and OWASP Protection Level

The blocking decision, the attack score and the protection level.

• How does TR7 WAF decide whether to block a request?WAF-04-001
• What is the attack score and how is it calculated?WAF-04-002
• What is the OWASP Protection Level; how many levels are there?WAF-04-003
• What is the default protection level?WAF-04-004
• Which protection level should I choose (Elementary, Normal, Tight, Very Tight and Aggressive)?WAF-04-005
• How does tightening the protection level affect false positives?WAF-04-006
• In which cases is a request not blocked even though an attack is detected (signature in Monitor state, Monitor mode, Teacher, Learning mode)?WAF-04-007
• Can I set the protection level separately for each domain / host group?WAF-04-008
• What does the "Max. Owasp Exclusions" setting do; what happens if the limit is exceeded?WAF-04-009
• If a request contains several attacks, does the WAF stop at the first match or evaluate all of them?WAF-04-010