I need to use ASM Captcha feature for registering page - it means Captcha is active/visible from the first client attepmt/access of the registering page to prevent robots of creating accounts. (application is not compatible with google recaptcha so I try find out substitution of it).
Is it needed to use Captcha feature via APM (not ASM)?
This is exactly why the Bot Profile is used but you play around and read more about the F5 Advanced WAF as then when you have played around and read about it if you issue that you can't solve then better to use the F5 community or the F5 TAC for help.
From what I have seen better not block the bad bots but to just drop the connection or use honey pot page and rate limit them as when you block they will simply start using another attacking bot tool and the game starts again. Also if your dev team has a bad application that does not send for example emails for confirmation for the registration then it is not ok as also when te bot uses an existing email better just say check your email for confimation and for existing account an email can be send informing them that they have already an account and so on.
This is exactly why the Bot Profile is used but you play around and read more about the F5 Advanced WAF as then when you have played around and read about it if you issue that you can't solve then better to use the F5 community or the F5 TAC for help.
From what I have seen better not block the bad bots but to just drop the connection or use honey pot page and rate limit them as when you block they will simply start using another attacking bot tool and the game starts again. Also if your dev team has a bad application that does not send for example emails for confirmation for the registration then it is not ok as also when te bot uses an existing email better just say check your email for confimation and for existing account an email can be send informing them that they have already an account and so on.
- If your post was solved it would be helpful to the community if you selected *Accept As Solution* on the relevant reply (or replies). This helps future readers find answers more quickly and confirms the efforts of those who helped.
