How do you move from none → reject safely?

Increase protection gradually using pct. For example:

p=quarantine pct=25 then 50 then 75 then 100

Then move to:

p=reject pct=25 and gradually raise to full enforcement.

This staged rollout avoids disruption.