Deploy Managed Rulesets for a zone in the dashboard

You can enable and configure Managed Rulesets for a zone in Security > WAF > Managed rules.

Managed rules tab of Security > WAF

Deploy a Managed Ruleset

Under Managed Rulesets, click Add on the right of a Managed Ruleset to deploy the Managed Ruleset for the current zone.

When you deploy a Managed Ruleset, the WAF adds an Execute rule, displayed under Managed rules, that deploys the Managed Ruleset.

Click the Enabled toggle on the right of a Managed Ruleset to enable or disable it.

Configure a Managed Ruleset to:

Define specific field values for one or more rules (for example, configure a rule with an action different from the action configured by Cloudflare)
Disable one or more rules

To skip one or more rules or WAF Managed Rulesets, add a WAF exception .

To configure rule field values for all the rules in a Managed Ruleset:

Log in to the Cloudflare dashboard, and select your account and website.
Go to Security > WAF > Managed rules.
On the right of the Execute rule that deploys the Managed Ruleset you want to configure, click Edit.
Under Ruleset configuration, set one or more rule fields from the available values in the drop-down lists.

For example, select the action to perform for all the rules in the ruleset from the Ruleset action drop-down list.
Click Save.

You can browse the available rules in a Managed Ruleset and search for individual rules or tags.

Use the available filters in the Browse Managed Ruleset interface.

To view the rules of a Managed Ruleset:

Log in to the Cloudflare dashboard, and select your account and website.
Go to Security > WAF > Managed rules.
On the right of the Execute rule that deploys the Managed Ruleset you want to browse, click Edit.
Click Browse rules.

The Browse Managed Ruleset interface displays.

You can configure one or more rules in the Browse Managed Ruleset interface.

Do the following:

Search for a rule using the available filters. You can search for tags.
Find the rule you want to configure in the results list.
In the result line for the rule you want to change, select the desired value for a field in the displayed drop-down lists. For example, select the rule action in the Action dropdown.

In some Managed Rulesets, you can also change the status of a rule using the toggle available on the right.
Click Next.

The Configure Managed Ruleset interface displays, listing the configuration you just defined.
Click Save.

You can configure several rules at once in the Browse Managed Ruleset interface.

Do the following:

Enter search terms in the available input to find the rules you want to configure. You can search for tags.
In the results list, click the checkbox on the left of all the rules you want to configure.

Alternatively, click a tag name under the search input to filter the rules with that tag, and then click the checkboxes for the rules you want to configure.
Update one or more fields for the selected rules using the drop-down lists displayed in the top right corner of the table.
Click Next.

Note
If you selected a tag, you get a dialog asking you if any new rules with the selected tag should be configured with the field values you selected.

Select Do not apply to new rules to apply your configurations to the selected rules only.

Select Apply to new rules if you want to apply your configurations to any new rules with the select tag.
Click Save.