Add an exception in the dashboard

In the Cloudflare dashboard, go to the Security rules page.

Select Create > Managed rules.

In the Cloudflare dashboard, go to the WAF page.

Go to the Managed rulesets tab.

Select Deploy > Deploy managed exception.

In Exception name, enter a name for the exception.

In When incoming requests match, specify a filter expression that defines the conditions for applying the exception. When the expression matches, the WAF will evaluate the exception skipping one or more rules of WAF managed rulesets. The filter expression uses the Rules language.

In Then, select the exception type that determines which rules to skip:

• Skip all remaining rules: Skips all remaining rules of WAF managed rulesets. If you select this option, proceed to 4. Create the exception.
• Skip specific rules from a Managed Ruleset: Skips one or more rules of a managed ruleset.

Select Select ruleset.

Next to the ruleset containing the rule(s) you wish to skip, select Select rules.

A) To skip one or more rules in the ruleset:

1. Search for a rule using the available filters. You can search by description, rule ID, or tag. For example, in the Cloudflare OWASP Core Ruleset you can search for 920460 to find the rule 920460: Abnormal character escapes in request.
2. Select the checkbox next to the rule(s) you want to skip.
3. If required, search for other rules and select them. The dashboard keeps a list of the rules you selected between searches.

B) To skip all the rules in the ruleset:

1. Select all the rules in the current page by selecting the checkbox in the table header, near Description/Rule ID. The table header will display 10 rules selected (of <TOTAL> rules).

   [Rule selection page showing the option to select all the rules in the ruleset]

2. Select Select all <TOTAL> rules in the table header to select all the rules across all pages.

Select Next.

(Optional) To disable logging for requests matching the exception, disable Log matching requests.

To save and deploy your exception, select Deploy. If you are not ready to deploy your exception, select Save as Draft.

In the Cloudflare dashboard, go to the Security rules page.

(Optional) Filter by Managed Rules.

Find the exception you want to edit and select its name. Exceptions are rules listed with Action = Skip.

Once you have finished making changes, select Save.
Alternatively, to delete the exception, select Delete exception.

In the Cloudflare dashboard, go to the WAF page.

Go to the Managed rulesets tab.

Find the exception you want to edit and select its name. Exceptions are rules listed with Action = Skip.

Once you have finished making changes, select Save.
Alternatively, to delete the exception, select Delete exception.