unable to detect login page

Kindly confirm can we deploy waf in such a manner that it will only detect sucessful response from server on login page and try to protect the application with the help of bruteforce not on username...