Forum Discussion
Custom attack signature syntax for multiple user agents
Hi,
I want to create a custom attack signature that will block requests that contains specific user agents.
I've already created a signature that blocks Python user agent, but I'm not sure how to add multiple ones to the same signature.
Under "Rule" section, I use the Simple Edit Mode and I have set:
Matched Element: Header
Matched Criteria: Matches regular expression
Keyword: User-Agent:.*[Pp]ython.*
How do I add more user agents?
Thanks
- JRahmAdmin
Hi Jonathan_c, if you use a regular expression you can match any number of strings and in case-insensitive manner. You can check out a couple examples for guidance:
- Mitigating Remote Code Execution
- https://community.f5.com/t5/technical-forum/asm-provided-signatures-rules-text/m-p/217674#M201368
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com