To add a new custom deny rule group, click on the 
button and provide a unique name for the new group. To add a custom rule to a custom group, click on the 
button on the right inside the group. Rules are removed from a group by clicking on the 
button right next to them.
Deny rules can be switched into log-only mode on mapping detail pages on Tab – Deny Rules. You can use the Log Only checkbox on a deny rule group header to quickly enable/disable the log-only mode for all rules in the group. In log-only mode, requests violating the rule are not blocked. The corresponding block log entry is created, but the request is still passed to the back-end server.
If you accidentally delete a rule, you can reload the last saved or activated configuration under Submenu – Configuration Files to recover the previous configuration.