- Products
- Learn
- Local User Groups
- Partners
- More
Are you a member of CheckMates?
×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Legitimate request blocked by CloudGuard WAF? See how Learn Request resolves a false positive. In this demo, a bookstore search for “The Girl Who Played with UNION SELECT” is blocked.
We find the event in the Infinity Portal, mark it as benign, retry the search successfully, and then revert the learned status.
Learn Request vs. Exception:
• Learn Request: Mark an event as benign so the WAF learns its request pattern. Allow up to 2 hours for the change to reach enforcing agents. A revert can take the same amount of time.
• Exception: Define a policy rule with the conditions and action you choose. It takes effect on the next policy update.
Need the request unblocked right away? Use an Exception. Want the WAF to learn a confirmed false positive? Use Learn Request.
📄 Check Point documentation: https://waf-doc.inext.checkpoint.com/how-to/mark-a-log-as-benign
Thu 01 Oct 2026 @ 05:00 PM (CEST)
Under the Hood: Check Point WAF | Preventing minus-zero-day attacksTue 06 Oct 2026 @ 12:00 PM (ACDT)
Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus APACTue 06 Oct 2026 @ 03:00 PM (CEST)
Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus EMEAThu 01 Oct 2026 @ 05:00 PM (CEST)
Under the Hood: Check Point WAF | Preventing minus-zero-day attacksTue 06 Oct 2026 @ 12:00 PM (ACDT)
Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus APACTue 06 Oct 2026 @ 03:00 PM (CEST)
Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus EMEATue 06 Oct 2026 @ 02:00 PM (EDT)
Rethinking Network Security for the AI Era : Session 2 - From User, to Branch and Campus AMER
