For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

iRule's avatar
iRule
Icon for Cirrus rankCirrus
Mar 12, 2023

Block requests from web browser and only allow from clients application in ASM

Dear Community, I have a requirment to allow email application traffic initialated from email clinets i.e outlook, boxer only and block all traffic initiated from web browsers. Please inform how we ...
@ASM
application
application delivery
security
waf
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Mar 14, 2023

I agree that blocking User-Agent is useless but F5 Bot signatures also check header order and if there are missing HTTP headers and maybe this feature in the Bot profile "Browser Access(BIG-IP 15.x and later)" set to "Block" you can test  https://my.f5.com/manage/s/article/K42323285