Hm, that would be really nice but I think, the normal requests from normal visitors would be JS Challenged as well, which isn’t a good thing, right?
Either one rule could end up being in a conjuction with the second one - I am afraid how that would either work, if so.
Could be I am wrong about it.
I would rather suggest below:
Known “good” bots are listed on the below link, kindly check which one are they:
To block bad bots, I would suggest creating another Firewall Rule which includes a list of them, something as follows on below posts:
You could also combine multiple things (like bad bots) into a single Firewall Rule, like block all bad bots but at the same time allow good “known” bots from the