Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
14.1.0, 14.1.0.1
Fixed In:
15.0.0, 14.1.0.2
Opened: Oct 12, 2018 Severity: 3-Major
When using one of the pre-defined profiles, "bot-defense-device-id-generate-after-access" and "bot-defense-device-id-generate-after-access", Search Engines might get Device ID challenges (and will most likely get blocked since cannot run JS)
Search Engines may be blocked.
One of the pre-defined profiles ("bot-defense-device-id-generate-after-access" or "bot-defense-device-id-generate-after-access") are attached to vs, and a valid search engine sends requests.
Change mitigation of "Trusted Bot" in the attached profile to "Alarm": 1. Go to Security ›› Bot Defense : Bot Defense Profiles ›› bot-defense-device-id-generate-after-access or Security ›› Bot Defense : Bot Defense Profiles ›› bot-defense-device-id-generate-before-access 2. Go to tab "Mitigation Settings" 3. For "Trusted Bot" choose "Alarm". 4. Save profile.
None