ASM - Proactive Bot Defense - No Logs?
Hi all I have a Virtual Server with an Application Security and DoS Profile applied to it. The DoS profile just contains Proactive Bot Defense, Always On. Other features of DoS profile are off. I can see it working when turned on, by cURL'ing the site and seeing the JS response. However these events aren't showing up in any logs, is that expected? It would be nice to be able to see blocked/denied requests to the site to ensure i haven't broken journeys for our customers. Any help would be much appreciatedAppSec Made Easy: Proactive Bot Defense
Learn how to use the F5 Advanced Web Application Firewall to easily protect your applications against bots. Bots can be used as tools for a variety of attacks such as DoS, credential stuffing and brute force, or web scraping. See the entire AppSec Made Easy series.
Proactive Bot Defense & Deep Linking
Hey guys, I'm working on implementing deep linking into our mobile application. I'm not developing the app but I am a dev for the website and have been in regular contact with the mobile devs & our IT infrastructure guys to help out with this problem. We're running into an issue with the proactive bot defense where it isn't allowing any traffic from Apple's crawler past the proactive bot defense. Our mobile app developers are saying because the request comes from the OS rather than the mobile app that it won't work? (This seems a little strange to me personally, but regardless it's the pro-active bot defense that is currently standing in our way). When I try to verify this with the appsearch-validation-tool (https://search.developer.apple.com/appsearch-validation-tool) by Apple I'm receiving an error saying that it is unable to parse the apple-app-site-association file. I'm not sure if anyone here has had any experience with this but it would be great to get some extra info to be pointed in the right direction!! Thanks, Paul