---
title: API/ Request blocked by WAF
description: "WAF [Web application Firewall] is primarily being used to block any malicious requests or rather, requests from attackers. However, there is a rare possibility of valid request getting blocked – depending on the type of data our customers use and how ..."
url: "https://supportb.kinsta.cloud/docs/api-request-blocked-by-waf/"
updated: "2021-08-16"
category: API
---

# API/ Request blocked by WAF

WAF \[Web application Firewall\]  is primarily being used to block any malicious requests or rather, requests from attackers. However, there is a rare possibility of valid request getting blocked – depending on the type of data our customers use and how they send it to our system by means of APIs calls and browser's requests.

 

If any of your customer representative reports any abnormal issues pertaining to a block from WAF (see samples below), you can report it to Security team.

We would have to collect and examine the following information.

1) Reference ID.
2) API URL along with auth creds.
3) API data.

 

This is how a sample block looks like (i) from a browser, and (ii) raw response:

 

(i)                  Browser:

 ![](https://desk.zoho.in/galleryDocuments/edbsn9f10ae57dff9baa05f7ac183ecb799b5ebe24d27452380ac558e87e91525ac2298778e9800b96de3c7a129022c0228b0ae0451899a779eacd0a99b7750b2f162)

 

(ii)                Raw response:

 

*HTTP/1.1 403 Forbidden*

*Server: AkamaiGHost*

*Mime-Version: 1.0*

*Content-Type: text/html*

*Content-Length: 331*

*Expires: XXX*

*Date: XXX*

*Connection: close*

*Server-Timing: cdn-cache; desc=HIT*

*Server-Timing: edge; dur=1*

*<HTML><HEAD>*

*<TITLE>Access Denied</TITLE>*

*</HEAD><BODY>*

*<H1>Access Denied</H1>*

* *

*You don't have permission to access "http&#58;&#47;&#47;api&#45;us11&#46;leadsquared&#46;com&#47;v2&#47;LeadManagement&#46;svc&#47;Lead&#46;Create&#63;" on this server.<P>*

*Reference&#32;&#35;XX&#46;4882c31&#46;16290XXXX5&#46;8dcXX6fd*

*</BODY>*

*</HTML>*