For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Hoang_Hung's avatar
Hoang_Hung
Icon for Cirrus rankCirrus
Oct 23, 2020

Bot defense block false Positive

Hi all I had configurated Bot defense policy on BIG-IP version 15.1.0.4. After I had applied to block. all requests to the webserver with status blocking. I don't understand why it blocks. Please ...
ASM Advanced WAF
BIG-IP
security
Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee
Oct 30, 2020

Hello Hung,

 

This block is not related to bot mitigation settings. It is related to Browsers verification.

It seems that in browser you send request to not Qualified to Injection URL.

In general, to make URL qualified, you need to get 10 server responses with html tag OR you can manually make URL always qualified by dosl7.cs_qualified_urls sys db - e.g. "modify sys db dosl7.cs_qualified_urls value /1.html,/*php"