Firewall issue

Hello there,

My normal browser traffic is always marked as DDoS attack and challenged, making my api unusable. I have configed rules to bypass all (if Request Path = /* bypass and if method = GET/POST bypass) but that did not help.