CloudflarePaschal Obba
Get better visibility for the WAF with payload logging
The article discusses improvements in Cloudflare's Web Application Firewall (WAF) through the introduction of payload logging, which enhances visibility into the actions taken by the WAF. As web attack surfaces grow, fine-tuning WAF configurations is essential to reduce false positives. The payload logging feature logs specific fields in requests that trigger WAF actions, aiding in debugging and rule optimization.
Key improvements include partial evaluation of array fields, reduced log sizes, and better context for matches. The article emphasizes the importance of these enhancements for customer assurance and plans for future expansions of payload logging to other WAF products.