What will browsers see when they are blocked by Threat X WAF?

#1

Will they see an error page or a challenge?

#2

By default blocking is handled via nginx 444 status message - the communication is simply dropped and a browser will get “Empty content from server” error message.

This behavior can be modified upon request to return a more descriptive message.