Scenario ③ · WAF action = Managed Challenge

🛡️ You are seeing this page = the Managed Challenge rule is not active

When configured, this URL (https://oldm.nc-demo.cf/demo/managed.html) first shows a challenge using the custom challenge page you uploaded (Custom Errors → managed challenge). A human passes with almost no friction; a bot/client without JavaScript cannot get through.

Audience demo

  1. WAF → Custom rules: match URI Path contains "/demo/managed.html" → action Managed Challenge.
  2. Open in a normal browser → brief or no visible interruption, then the page loads (human).
  3. Try curl -I https://oldm.nc-demo.cf/demo/managed.html → no 2xx — a challenge is issued.
  4. Challenge decision page (Rules → Challenge) → Actions → Adjust → For a managed challenge: choose "Fail" to demo the block outcome for everyone, then set back to "Pass".

← Back