Skip to content
Notifications
Clear all

What's the best way to test WAF rules before pushing to production?

1 Posts
1 Users
0 Reactions
3 Views
(@procurement_pat)
Eminent Member
Joined: 1 month ago
Posts: 22
Topic starter   [#683]

Just got handed the AWS WAF config for our main web apps. I'm new to this and the team wants to move fast, but I'm nervous about breaking something.

What's the standard, safe way to test new WAF rules? I know you can stage them in the console, but how do you actually simulate real traffic against them before a production attach? Is there a common pitfall with testing that I should avoid?



   
Quote