Difference between revisions of "WAF 303800"

From Atomicorp Wiki
Jump to: navigation, search
(Created page with "{{Infobox |header1= Rule 303800 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Atomicorp.com WAF Rules: Fake Googlebot webcrawler }} = Description = Thi...")
 
m (Description)
Line 10: Line 10:
  
 
This exclusive capability in the Atomicorp ruleset can detect when a client pretends to be the google webcrawler.  This helps to detect and block potential zero day and other supsicious behavior.  Attacks have been know to impersonate webcrawlers to trick naive applications that blinding trust webcrawlers.  They use this method to gain access that would otherwise be blocked to non-crawlers.
 
This exclusive capability in the Atomicorp ruleset can detect when a client pretends to be the google webcrawler.  This helps to detect and block potential zero day and other supsicious behavior.  Attacks have been know to impersonate webcrawlers to trick naive applications that blinding trust webcrawlers.  They use this method to gain access that would otherwise be blocked to non-crawlers.
 +
 +
This will not block the real google webcrawler.  We do not recommend you disable this rule.
  
 
= Troubleshooting =
 
= Troubleshooting =

Revision as of 17:03, 4 April 2014

Rule 303800
Status Active
Alert Message Atomicorp.com WAF Rules: Fake Googlebot webcrawler

Contents

Description

This exclusive capability in the Atomicorp ruleset can detect when a client pretends to be the google webcrawler. This helps to detect and block potential zero day and other supsicious behavior. Attacks have been know to impersonate webcrawlers to trick naive applications that blinding trust webcrawlers. They use this method to gain access that would otherwise be blocked to non-crawlers.

This will not block the real google webcrawler. We do not recommend you disable this rule.

Troubleshooting

False Positives

There are no known false positives with this rule. If you believe this is a false positive, please report this following the process at the link below:

https://www.atomicorp.com/wiki/index.php/Reporting_False_Positives

Tuning Guidance

Please see the Tuning the Atomicorp WAF Rules page for more information if you wish to disable or modify this rule.

Additional Information

Similar Rules

None.

Knowledge Base Articles

None.

Outside References

None.

Personal tools