Use of captcha without Proactive Bot Defense enable

How are you testing the Captcha? Also, are you willing to post the irule for review? I'm assuming you have an http profile on the virtual server? Do you have an ASM policy as well?

Hi

I have a virtual server with DOS profile without Pro Active Bot Defence and a ASM policy. There is a http profile on.

My irule I test with:

when HTTP_REQUEST {
    log local5. "Before captcha_challenge" 
    set res captcha_challenge
    if {$res ne "ok"} {
        log local5. "Unable to send captcha_challenge: "
    }
    log local5. "After captcha_challenge"    
}

From log:

: Before captcha_challenge
: Unable to send captcha_challenge:
: After captcha_challenge

But there is no captcha challenge as I was hoping for.

When using Pro Active Bot Defence I can get it to work, but the javascript do not fit to our web site so nice and it also stop Internet explore version 11 to stop in InPivate mode.

: resulting action tcp_rst reason "suspicious browser"

Hi

I do this wrong I have understand since I assign the value captcha_challenge to res. Basic I took it as function I could use.

But can I use the captcha function in an irule?

Based on what you are trying to do, you might be able to use this irule:

https://devcentral.f5.com/codeshare?sid=534

Be aware that captchas use javascript. So you may have some of the same issues with this that you had with bot defence. As such I would test this before putting it into production.