Merge pull request #9996 from KristinnVikar/main

Remove Dell matcher from sonicwall WAF detect (False Positives)

http/technologies/waf-detect.yaml

@@ -74,9 +74,9 @@ http:
       - type: regex
         name: teros
         regex:
-          - '(?i)st8(id|.wa|.wf)?.?(\d+|\w+)?'
+          - '(?i)st8(id|.wa|.wf)?.?(\d+|\w+)?='
         condition: or
-        part: response
+        part: header
 
       - type: regex
         name: stricthttp
@@ -156,14 +156,6 @@ http:
         condition: or
         part: response
 
-      - type: regex
-        name: ats
-        regex:
-          - '(?i)(\()?apachetrafficserver((\/)?\d+(.\d+(.\d+)?)?)'
-          - '(?i)ats((\/)?(\d+(.\d+(.\d+)?)?))?'
-        condition: or
-        part: response
-
       - type: regex
         name: malcare
         regex:
@@ -580,7 +572,6 @@ http:
         regex:
           - '(?i)This.request.is.blocked.by.the.SonicWALL'
           - '(?i)Dell.SonicWALL'
-          - '(?i)\bDell\b'
           - '(?i)Web.Site.Blocked.+\bnsa.banner'
           - '(?i)SonicWALL'
           - '(?i).>policy.this.site.is.blocked<.'