Forum Discussion

brandon_liew_ch's avatar
brandon_liew_ch
Icon for Nimbostratus rankNimbostratus
Sep 11, 2013

[/apple-touch-icon.png]

HI, Lately, i saw a lot of traffic drop by the F5 ASM Firewall. As, i am very new to F5 may i know what the reason the F5 detected as - Non-browser Client - Does it means that mobile user running on ...
security
brandon_liew_ch's avatar
brandon_liew_ch
Icon for Nimbostratus rankNimbostratus

Hi, Yes its actually have 0X20..I copy and paste the output here.sorry may i know What do you mean by DC? I have no idea, why the F5 detected it as - Violation - Attack signature detected - Automated client access (http client)

 

Detected Keywords

Accept-Encoding:0x20gzip0xd0xaConnection:0x20Keep-ALine break live0xd0xaHost:0x20www.xyz.com0xd0xaUser-Line break Agent:0x20Dolphin0x20http0x20client/10.0.3(238)0x20(Line break Android)0xd0xaX-Forwarded-For:0xxx.xx.xx.6Line break 80xd0xa0xd0xa

 

What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Sep 11, 2013
DC is this site, DevCentral. Ah OK, understood. I'm not that familiar with ASM but can you not manually add this user agent? Can you observe the user agent sent when you use your phone, when it works?