Imperva Cyber Community

communities_1.jpg
 View Only
  • 1.  Allow Pingdom

    Posted 08-10-2023 12:08

    Hello,

    I'm fairly new to ABP and am looking for advice on how to create a condition to allow the text "PingdomPageSpeed".  Currently this is causing mitigation under Bad User Agent.

    Thanks!

    Tony


    #AdvancedBotProtection

    ------------------------------
    Tony Convertine
    Security Engineer
    Arthur J. Gallagher & Co.
    Rolling Meadows IL
    ------------------------------


  • 2.  RE: Allow Pingdom

    Posted 08-11-2023 07:30

    Hello Tony.

    It really depends on where is the text (PingdomPageSpeed) that you want use in ABP policy. If this text is in the request body - then we can't catch it with ABP policy, since ABP analyze headers only. However if the text is located in headers, you could easily create a new condition based on header.

    Based on your description, I assume that you want to add an exception for specific user-agent which are classified as Bad User Agents by default condition. To archive this - you can add a new condition to the "Allow" directive like this:

    (matches headers.user_agent re"PingdomPageSpeed")

    More information:

    1. https://docs.imperva.com/bundle/advanced-bot-protection/page/74916.htm
    2. https://management.service.imperva.com/abp/help/condition?caid=1877114


    ------------------------------
    Bartosz Chmielewski
    SE
    Imperva
    ------------------------------



  • 3.  RE: Allow Pingdom

    Posted 08-11-2023 11:54

    Hello Bartosz,

     

    Looks good, appreciate the help!

     

    Tony