Block all "bot" happy with the result but still one can bypass

[sdayman]

That’s getting closer. If there are other Known bots that don’t have “bot” in their name, it won’t stop them.

You still need to watch your logs for anything that gets through.

[Rocky.sy]

@sdayman

other Known bots that don’t have “bot”

yes. I know … i blocked few words like spider , crawl,
and I noticed i need to add “Bot” as well … with the case sensitivity, it is an impossible task. But as always, there is no 100% security. we just try to mitigate

Thank you so much I learnt a lot from you

[sdayman]

You can try this:

Case sensitive firewall

Since you only seem to be trying to have the path be case insensitive, it would look like this: (http.user_agent contains "Some Text" and lower(http.request.uri.path) eq "/folder/somepage.aspx") If you also need the check on the User-Agent be case insensitive, then you’d do: (lower(http.user_agent) contains "some text" and lower(http.request.uri.path) eq "/folder/somepage.aspx") Notice how Some Text is lowercased. Hope that helps!