WAF stands for Web Application Firewall. In Rebel Plesk hosting, WAF acts as an automated security shield that checks incoming traffic to protect your website from hackers and malicious attacks.

Sometimes, WAF gets a bit overprotective. If you are using complex page builders (like Divi) or form plugins (like GiveWP), WAF might mistake your saved changes for an attack and show a 403 Forbidden error.

How to Adjust WAF (ModSecurity) Settings

1. Log into your Rebel Plesk Panel.

2. Go to Domains and select your website.

3. Click Web Application Firewall (ModSecurity).

4. Set the mode to Detection Only (logs issues without blocking your edits) or Off.

5. Click OK.

Support Note: Rebel Support can help you change firewall modes or unblock locked IP addresses. Custom code fixes or website design updates belong to your web developer.

Official Resource: Plesk ModSecurity Documentation