Forum Discussion

gh0st_325958's avatar
gh0st_325958
Icon for Nimbostratus rankNimbostratus
Jan 31, 2018

Device ID, Dos profile, problem

Dear all,

 

Have you got any idea for this situation?

 

I set up the DOS profile in block, and set the Device ID parameter in TPS and Stress Based Detection. This parameter generated two interesting problem.

 

First, It cause a whitescreen for 10-30 sec before the user gets the site page.

 

Second, If someone would like to use my site with mobile, It randomly block some device, without any feed back, because the captcha do not work on android or iOS device.

 

I used QR code identification, it is problem?

 

If I switched off the parameter, these problem solved.

 

Thanks,

 

ASM Advanced WAF
security

1 Reply

  • samstep's avatar
    samstep
    Icon for Cirrocumulus rankCirrocumulus
    Feb 03, 2018

    Device ID is the most confusing thing in ASM as "Device" does not mean a mobile device - F5 uses JavaScript to fingerprint the browser and when it can't you will get this problem, so if your mobile site is using JSON for example then Device ID will not work properly and will keep blocking legitimate smartphone users. DOS profiles require very fine tuning and understanding of the the impact of each parameter.