What to change
Security controls can distinguish requests by network, browser behaviour or other characteristics. Ask the hosting owner to identify the specific blocked request and matching rule before changing protection. A narrow exception or configuration correction may be appropriate, but the evidence should include an unaffected page and a control request that should remain blocked. Avoid treating every automated request as necessarily legitimate or necessarily unwanted.
A worked example
Illustrative example
Illustrative test: Compare the affected article and an unaffected article through the same external checker. An external monitoring check may receive a challenge on one guide while reception opens it normally. The hosting owner compares that request with an unaffected page and identifies a particular rule. A targeted change is reviewed by the security owner, then both intended access and a request meant to remain blocked are tested. The record explains exactly what changed, rather than saying security was disabled to resolve search.


What this means for your practice
Website protection can respond differently to different visitors and automated checks. If staff can read a guide but an external test receives a challenge, ask the hosting supplier to identify that particular request and the rule that affected it. Avoid accepting a broad proposal to switch protection off simply to make one test green. Your role is to explain which public journey should work and who is authorised to investigate. The supplier should demonstrate a narrowly appropriate correction, comparing the affected guide with a working page. Ask the person responsible for website security to review the result, including evidence that the intended protection remains effective for requests it should still stop.
How to check the result
The intended public request succeeds and the security owner accepts the adjusted rule.
A mistake to avoid
Disabling the entire firewall hides the cause and broadens exposure.
Turn reading into a next step
Your action checklist
Work through these checks with your team or supplier. Tick the ones you have resolved and leave unknowns open.
Record what you know, what is still missing and the answer you need from your team or supplier.
Use project decisions only, without personal, patient or confidential details. Entries stay in this page and are not submitted to Kay & Co. Copy or download before leaving; this page does not save your notes.
Further reading
These sources provide background for the topic. The practice examples and checklist are illustrative planning suggestions from Kay & Co.
Related guides
Need help with this?
Tell us what is getting in the way. Kay & Co. can help you understand the options and turn the next step into something that works for your practice.
Explore marketing & search services or discuss your project.
Try the free Healthcare Digital Planner to find your starting priority.
