How do I get a "Verifying you are human. This may take a few seconds."

Application Security SSL / TLS
,
1

What is the name of the domain?

myfakeadresscom

What is the issue you’re encountering

Too many bots

What steps have you taken to resolve the issue?

Other cloudflare bots settings.

What is the current SSL/TLS setting?

Full (strict)

What are the steps to reproduce the issue?

I just want to know how i can (preferrably on a free plan) implement a "Verifying you are human. This may take a few seconds.

XXXXXX needs to review the security of your connection before proceeding".

Screenshot of the error

cloudflare.png
cloudflare.png921×301 19.1 KB

2

Security Bots:
Bot Fight Mode is ON
Block AI Bots is ON
AI LabyrinthBeta is OFF
Manage bot traffic with robots.txt is OFF

3

You can force a verification by adding a custom WAF rule configured for the conditions you want, maybe a specific network ASN, or maybe a specific host or path such as a contact page, or the whole site, then set the action to Managed Challenge. See here…

You will need to include exceptions for any search engine crawlers or automated third party tools that will fail if challenged.

2 Likes
4

OK. Thanks.

I can now see the “Verifying you are human” when I chose action “Managed Challande”.
Or is the JS challande enough?

Also, I am a bit worried about search engine crawlers because I still want them to access my site.
How can I solve that? I could go to Security > Bots and set " Manage bot traffic with robots.txt" to ON. But would the robots.txt-file make search engine crawlers to override the WAF rule and give access to my site?

But, OK, the WAF rules… How can I write a WAF rule to do “Managed Challande” for all visitors that visit any part of my site, except for known bots which would always have granted access? Do I need to use two separate WAF rules? My WAF/expression is: (http.request.uri wildcard r"*"). Can I use “Known Bots” somehow in the WAF’s field?

5
2 Likes
6

Thanks again!! I have now created: (http.request.uri wildcard r"*" and not cf.client.bot)

7

Anyone, is it possible to speed up the “Verification process”? I have set a WAF rule to do the action of “Managed Challange”, but on devices, this process can takes like 8 seconds or even more, so visitors could leave my site before the process of verification ends. On desktop, the process is fast.

8

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.