For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ragunath154's avatar
ragunath154
Icon for Cirrostratus rankCirrostratus
Oct 12, 2021

bot signature update without Treat campaign license

Hi is there a way to update the BOT signatures without Treat Campaign license.   as of bigip version 14 and above BOT signature update requires Treat campaign license..  
application delivery
ASM Advanced WAF
security
Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
Oct 30, 2021

Hi , 

 

the short answer is no. For details see K82512024: Managing BIG-IP ASM Live Updates (14.1.x and later)

 

"Bot Signatures: Class of signatures that identify legitimate or malicious web robots by looking for specific patterns in the headers of incoming HTTP requests. With the release of BIG-IP 14.1.0, this feature requires a separate license. Bot signature updates are part of the Threat Campaigns subscription-based service license. Without a Threat Campaigns license, bot signatures cannot be updated using manual or automatic updates; however, you can still add custom bot signatures.

Note: Bot signatures are updated on each major version; however, BIG-IP 14.1.0 includes updated bot signatures (the bot signature dated with the time of the release is part of the BIG-IP 14.1.0 ISO package.) In versions prior to BIG-IP ASM 14.1.0, the previous four update files are packaged in a single file.

 

Note: Beginning in BIG-IP 14.1.2.3 the Live Updates Available notification will not appear for Bot Signatures if that feature is unlicensed."

 

In other words, you will get bot signature updates either over a TC subscription or with every major release.

 

KR

Daniel