You can specify the response status code to send if policy evaluation fails.

You include a rejection handler in a rule by clicking to expand Advanced on the Create Rule window.

PingAccess contains three predefined rejection handlers:
Default API Rejection Handler
Returns a 403 status code in a JSON template.
Default Rate Limiting Rejection Handler
Returns a 429 status code in a JSON template.
Default Web Rejection Handler
Returns a 403 status code in an HTML template.