What to change
Security controls can distinguish requests by network, browser behaviour or other characteristics. Ask the hosting owner to identify the specific blocked request and matching rule before changing protection. A narrow exception or configuration correction may be appropriate, but the evidence should include an unaffected page and a control request that should remain blocked. Avoid treating every automated request as necessarily legitimate or necessarily unwanted.
A worked example
Illustrative example
Illustrative test: Compare the affected article and an unaffected article through the same external checker.
How to check the result
The intended public request succeeds and the security owner accepts the adjusted rule.
A mistake to avoid
Disabling the entire firewall hides the cause and broadens exposure.
Your action checklist
Use these checks to prepare a discussion with your team or supplier. Tick a check when you have recorded the decision or evidence, rather than when a feature has simply been promised.
Entries stay in this page and are not submitted to Kay & Co. Download your notes before leaving; the page does not save them.
Further reading
These primary sources provide additional context for the project decisions above.
Related decisions
Turn the brief into a working service
Kay & Co. can help you scope the work, design the experience and deliver the right solution for your organisation.
Explore marketing & search services or discuss your project.
Try the free Healthcare Digital Planner to find your starting priority.