Apr 20, 2026 — Improved accuracy of rule-based filtering in Web Security Analytics

Web Security Analytics now provides more precise visibility into mitigated traffic by improving how security outcomes are attributed to individual rules. It now clearly distinguishes between two filtering modes:

• Filtering by requests which returns requests that match your selected filter conditions. The system checks each request as a whole. If a request satisfies all of your conditions, even if those conditions are met by different rules, Web Security Analytics includes it in your filtering results. Because the request qualifies, the Samples view displays all the rules that triggered it.
• Filtering by rules which returns requests where the filter conditions are met within a single rule instance. If one rule satisfies all of your filter conditions, Web Security Analytics includes the entire request. Because the request qualifies, the Samples view displays all the rules associated with it, giving you complete context.

As a single request can trigger multiple security rules, filtering at the request level can make it difficult to determine which rule contributed to a specific outcome. When you apply filtering by rules, results include only the requests where a single rule meets all your selected filtering conditions. Learn more