Blockquote
You would need to add the configuration for haproxy such as
Yes ! i found that too, but forgot to run the cscli command 
After some restarts, Haproxy is now correctly producing logs and are being parsed ,and the pentest (nikto) got banned, logs show 200 with a ban method (and not 404).
cscli is showing the ban, should be removed in 4h.
This is very nice and slick, thanks very much for the help !
Sebastian