Forum Discussion
NimbostratusASM BotNet Detection and Java Script
We are trying to use ASM to block some Web Requests if they are from a Bot, or if volume gets too high.
Can someone explain when JavaScript enetrs the picture and if it interacts with the BotNet Detection parameters?
Specifically: 1) If JavaScript does not exist in the Browser or Bot Script, does that automatically classify the PC as a Bot. Or, do the counters then kick in, such as Grace Period, Page Changes per time period, and only if the Page Changes are too high is s the PC blocked for the unsafe interval?
or
2) If JavaScript does exist and can respond, does that mean the PC is automatically classified as not being a bot? Or, even if there is a javascript response, are the botnet counters still used to try and see if it is a bot. So, if there is a positive javascript response, if the PC exceeds the number of Page Changes per Interval, will it's traffic then be blocked?
1 Reply
waleed_osama_23I accidentally enabled Botnoet prevention on a virtual server that accepts both HTTP and non HTTP clients. And they ended up being considered as a botnet attack.
