Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP ASM
Opened: Sep 13, 2020 Severity: 4-Minor
When using an iRrule to send a Bot Defense challenge, if the page is not yet qualified, the PRG flow is halted even if bigdb variables are used to support it.
PRG flow does not, and re-submission is possible.
-- Bot Defense Profile is attached to a virtual server. -- An iRule is used to change action to challenge. -- PRG URL is added in a bigdb variable. -- Page is not yet qualified.
Configure this page to be qualified, using a bigdb: tmsh modify sys db dosl7.cs_qualified_urls value XXXXXX (Set your required URL instead of XXXX. The value here is a list, so if other URLs are configured, add those URLs to the list)
None