Application Security Community

Hi Experts,

we have Imperva on-prem WAF new deployment stil in simulation mode, its TRP deployment, running on 13.6, we have total 12 sites, and all in simulation mode but today i have change one site to active mode and users getting "the page can't be displayed" error message intermittently so i changed it back to simulation, then now some sites throwing the same above error, i don't know why as all the site are in simulation mode. any help would be appreciated.
#AllImperva

------------------------------
Moinuddin Shaikh
Security Engineer
Tabuk University
Tabuk
------------------------------

Hi Moinuddin,

The idea behind the simulation mode is to be able to fine tune the alerts that in active mode will block.
I suggest to look at the alerts that you are receiving in simulation mode and make sure they are not set to block.
Another possibility can be is that in active mode if you have some type of bot policy it may trigger bot alert that block as well so try to disable such policies to understand if this is the issue.

------------------------------
Michael Sorin
Software Engineer
Tel Aviv CA
------------------------------