F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

brandon_liew_ch's avatar
brandon_liew_ch
Icon for Nimbostratus rankNimbostratus
Sep 11, 2013

[/apple-touch-icon.png]

HI, Lately, i saw a lot of traffic drop by the F5 ASM Firewall. As, i am very new to F5 may i know what the reason the F5 detected as - Non-browser Client - Does it means that mobile user running on ...
security
brandon_liew_ch's avatar
brandon_liew_ch
Icon for Nimbostratus rankNimbostratus
Sep 11, 2013

Hi, Yes its actually have 0X20..I copy and paste the output here.sorry may i know What do you mean by DC? I have no idea, why the F5 detected it as - Violation - Attack signature detected - Automated client access (http client)

 

Detected Keywords

Accept-Encoding:0x20gzip0xd0xaConnection:0x20Keep-ALine break live0xd0xaHost:0x20www.xyz.com0xd0xaUser-Line break Agent:0x20Dolphin0x20http0x20client/10.0.3(238)0x20(Line break Android)0xd0xaX-Forwarded-For:0xxx.xx.xx.6Line break 80xd0xa0xd0xa

 

boneyard's avatar
boneyard
Icon for MVP rankMVP
Sep 11, 2013
you can't add it manually, this is a build in signature, that why i suggest the update, might be something that is captured now. it is detected for some reason, the exact one is difficult as we cant really look into build in signatures, so if it is an issue you disable to signature. if you want to get to the bottom contact TAC.