Bug ID 558212: Disable proactive checks on benign bots by internal parameter

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.1.0

Opened: Nov 15, 2015

Severity: 3-Major

Symptoms

A challenge is issued on a bot that is detected as benign bot. That challenge may make the bot un-usable.

Impact

A challenge is being performed, regardless of the action defined on the signature.

Conditions

A bot sends traffic that matches the bot signature. The signature is defined as benign. The signature doesn't have domain name configured, so no reverse dns lookup can be made.

Workaround

None

Fix Information

The system db parameter proactive_defense_exclude_benign_bots was added to exclude benign bots from client side challenge.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips