Forum Discussion
DudleyJones
Nimbostratus
NimbostratusF5 bot defense - false positives
I'm hoping someone can offer some advice. We have a Bot defense service (ex Volterra I think?) running on our WAF, and we're getting a lot of false positives, far greater than what we'd initially exp...
Daniel_Wolf
MVP
MVPAnd if you are using the "old" unified Bot Defense with Nikoolayy1 linked with K42323285, my recommendation is - don't use JavaScript verification. I've seen more than a handfull of applications break or act strange when JavaScript verification was used.
I recommend using the XC Bot Defense, it also injects JS, but it work's much more reliable with modern apps.
Cheers
Daniel
Nikoolayy1MVP
MVPFor XC read the docks I provided for GET(XHR/Fetch) and "GET(Document)" as one inserts "interstitial page" and GET(XHR/Fetch) needs to insert the javascript in the main web page for ajax SPA (single page applications) .
