Imperva Cyber Community

communities_1.jpg
 View Only
  • 1.  on-prem WAF

    Posted 12-20-2021 16:42
    Hi Experts,

    we have Imperva on-prem WAF new deployment stil in simulation mode, its TRP deployment, running on 13.6, we have total 12 sites, and all in simulation mode but today i have change one site to active mode and users getting "the page can't be displayed" error message intermittently so i changed it back to simulation, then now some sites throwing the same above error, i don't know why as all the site are in simulation mode. any help would be appreciated.
    #AllImperva

    ------------------------------
    Moinuddin Shaikh
    Security Engineer
    Tabuk University
    Tabuk
    ------------------------------


  • 2.  RE: on-prem WAF

    Posted 12-21-2021 09:23
    Hi Moinuddin,

    The idea behind the simulation mode is to be able to fine tune the alerts that in active mode will block.
    I suggest to look at the alerts that you are receiving in simulation mode and make sure they are not set to block.
    Another possibility can be is that in active mode if you have some type of bot policy it may trigger bot alert that block as well so try to disable such policies to understand if this is the issue.

    ------------------------------
    Michael Sorin
    Software Engineer
    Tel Aviv CA
    ------------------------------