Forum Discussion

iRule's avatar
iRule
Icon for Cirrus rankCirrus
Mar 12, 2023

Block requests from web browser and only allow from clients application in ASM

Dear Community, I have a requirment to allow email application traffic initialated from email clinets i.e outlook, boxer only and block all traffic initiated from web browsers. Please inform how we ...
@ASM
application
application delivery
security
waf
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Mar 14, 2023

I agree that blocking User-Agent is useless but F5 Bot signatures also check header order and if there are missing HTTP headers and maybe this feature in the Bot profile "Browser Access(BIG-IP 15.x and later)" set to "Block" you can test  https://my.f5.com/manage/s/article/K42323285