New ADM released today without the vserver restrictions and new WAF security profiling. Is there any type of tool, or script I can run against my gateway to have it trigger a WAF alert? Want to be able to demonstrate this to my clients that hey, this actually works and protects you now.

Did you find sth? I did some tests, for example with that one you will get a Blocked on the WAF. https://citrix.customer.com/?travelpayouts_redirect=https://oast.me