I tried this option.
Added XML threat Protection.
And while putting the xml Request in body part I am violating all the policies like NodeDepth,ChildCount,AttrValue...
But getting the 200 OK successful response.

Provide your email address if you wish to be contacted offline about your comment.
We will not display your email address as part of your comment.

We'd love your feedback and perspective! Please be as specific as possible.
Type the characters you see in this picture. (verify using audio)

Type the characters you see in the picture above; if you can't read them, submit the form and a new image will be generated. Not case sensitive.