Blocking Clients via Cookies

If you can identify abusive clients from within your application, you can block those clients by setting a cookie that you defined as a blocking rule:

When Expedited WAF detects a request from a client with a blocked cookie name set, the request is blocked. Note that only the name of the cookie is compared, not the value.