I sometimes need to tweak Cyber Security Cloud Managed Rules because it is a predefined rule where I adjust it based on our request sizes. Sometimes a rule states that only a 5 MB request is allowed, but we have requests greater than 5 MB, which causes it to block that traffic. I have to adjust the rule and increase the size of the request or payload above 5 MB to resolve this issue. Cyber Security Cloud Managed Rules can be improved in that they are mostly general rules and not specific to organizational needs. Being predefined rules, if we have to make any changes, we need to create a rule above or before that cybersecurity rule or a bypass rule. There should be an option to tweak those cloud managed rules to adjust them based on organizational needs, as this has been one challenge we faced. Cyber Security Cloud Managed Rules is limited to specific scenarios. For example, AWS WAF can only be used in an AWS scenario, which makes it complex to integrate with on-prem systems.
