Forum Discussion

JP_124708's avatar
JP_124708
Icon for Nimbostratus rankNimbostratus
Dec 15, 2016

ASM BotNet Detection and Java Script

We are trying to use ASM to block some Web Requests if they are from a Bot, or if volume gets too high.

 

Can someone explain when JavaScript enetrs the picture and if it interacts with the BotNet Detection parameters?

 

Specifically: 1) If JavaScript does not exist in the Browser or Bot Script, does that automatically classify the PC as a Bot. Or, do the counters then kick in, such as Grace Period, Page Changes per time period, and only if the Page Changes are too high is s the PC blocked for the unsafe interval?

 

or

 

2) If JavaScript does exist and can respond, does that mean the PC is automatically classified as not being a bot? Or, even if there is a javascript response, are the botnet counters still used to try and see if it is a bot. So, if there is a positive javascript response, if the PC exceeds the number of Page Changes per Interval, will it's traffic then be blocked?

 

1 Reply

  • I accidentally enabled Botnoet prevention on a virtual server that accepts both HTTP and non HTTP clients. And they ended up being considered as a botnet attack.