For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Domai's avatar
Domai
Icon for Altostratus rankAltostratus
Jul 17, 2019

ASM BOT detetcion issue - white screen

Hello Guys I have a web application behind ASM the policy is configured to have Bot Detection Alarm and Block. So far so good. The issue is when the users access the application a particular "Show in...
application delivery
ASM Advanced WAF
Erik_Novak's avatar
Erik_Novak
Icon for Employee rankEmployee
Jul 17, 2019

Which version of BIG-IP are you running? Also, it will be helpful to log bot defense activity, which does not show up in the Event Logs used to report application security policy activity. Create a custom logging profile, and be sure to enable bot defense:

 

Then you can go to Event Logs : Bot Defense : Bot ReQuests to help isolate the problem.

 

Domai's avatar
Domai
Icon for Altostratus rankAltostratus
Jul 17, 2019

I am running 13.1.1.5, and I don't see the options that you shared on your screenshot.

Above is what i see in version 13.1.1.5

 

 

  • Ivan_Chernenkii's avatar
    Ivan_Chernenkii
    Icon for Employee rankEmployee
    Jun 03, 2020

    Hello Domai,

     

    If I am not wrong you are talking about "Proactive Bot Defense" feature, which is enabled in your DoS profile.

    If this is so, then to see blocked requests you need to enable "Log Challenged Requests" in logging profile. Also, in addition, you can enable "Log Legal Requests" too.

     

    About issue in pop-up window... Do you use AJAX request for it? If this is so, then you need to enable "Single Page Application" in "General Settings" of your dos profile.

     

    Do you use only "Proactive Bot Defense" feature or you also use some other Client-Side features like "Web Scraping"?

    Is it expected that users of your application have disabled JavaScript?

     

    Thanks, Ivan