F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Fredrik_Daniels's avatar
Fredrik_Daniels
Icon for Altostratus rankAltostratus
May 10, 2022

Bot Protection marks Samsung Internet as malicious

Hello, We have discovered that after Samsungs latest upgrade of the built in "Internet" (Samsung Internet Browser) 17.0.1.69, the bot protection both in transparent and blocking mode adds the cook...
security
Fredrik_Daniels's avatar
Fredrik_Daniels
Icon for Altostratus rankAltostratus
May 10, 2022

Thanks Nikoolay for all tips and links! We are having a case opening soon, luckily this browser (at least in our company) is not widely used.



Best regards, 

Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
May 10, 2022

Yes better see with F5 TAC but it is strange if you are still blocked in everything in transperant mode as it seems as another bug except if for some reason it is the DDOS profile blocking you by device id or the Bot protection has created a dynamic ddos signature or "DoS Attack Mitigation Mode" on the Bot profile to activate DDOS profile:

 

https://community.f5.com/t5/technical-forum/device-id-bot-dos-profile/td-p/265837?nocache=https:%2F%2Fdevcentral.f5.com%2Fs%2Fquestion%2F0D51T00008XHWzESAX%2Fdevice-id-botdos-profile

 

https://clouddocs.f5.com/training/community/ddos/html/class7/bados/module4.htmlhttps://techdocs.f5.com/kb/en-us/products/big-ip-afm/manuals/product/big-ip-system-dos-protection-and-protocol-firewall-implementations-14-0-0/07.html

 

https://techdocs.f5.com/en-us/bigip-14-1-0/big-ip-asm-implementations-14-1-0/configuring-bot-defense.html

 

  • Fredrik_Daniels's avatar
    Fredrik_Daniels
    Icon for Altostratus rankAltostratus
    May 10, 2022

    Looks like this Solved: Device ID - Bot/Dos Profile - DevCentral (f5.com) Device ID Mode : Generate After Access solves the issue. 🙂 

    After that change, i can also see the logs. Bot protection thinks this:


    We are having a case with TAC. See if we can solve this.

    Thanks for all help!

    Best regards, 

    Fredrik

     

    • Nikoolayy1's avatar
      Nikoolayy1
      Icon for MVP rankMVP
      May 13, 2022

      Hello, It is good that now you can stop the Bot protection from blocking the traffic in transperant mode so we can consider one of the issues solved. If possible mark the question as completed but after F5 has provided the fix for the bad bot categorization share it with us.