Security and bot protection is setup correctly in Cloudflare?

[gomarkb]

What is the name of the domain?

americanpolling.org

What is the isssue you’re encountering

Want to check if the security and bot protection is setup correctly? Reason being is, I did a report there is no reduction in bots signing up on our webform. Still it’s 12%

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

What are the steps to reproduce the issue?

Want to check if the security and bot protection is setup correctly? Reason being is, I did a report there is no reduction in bots signing up on our webform. It’s not moving further after 12%

Screenshot of the error

[neiljay]

@gomarkb

What is the current SSL/TLS setting?

Full

Well, I’m not certain about Super Bot Fight Mode yet, however, the current SSL configuration you’ve said isn’t that appropriate. You need to set it to Full Strict only. For more info, best I suggest you to read the following CommunityTutorial by @sandro

Why you should choose Full Strict, and only Full Strict

Unencrypted & unverified connections Imagine you open Paypal and suddenly get that warning [image] Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server. Equally, you’d probably not proceed if you got such a warning, right? [image] That’s when th…

With regards to SBFM, I suggest you to check out the following CommunityTutorial by @jnperamo

Super Bot Fight Mode - What to know

Introduction While blocking bots is appealing, we often find in the community that people run into issues while using Super Bot Fight Mode (SBFM). Below you can find a quick summary of the most common questions. How to create a bypass rule for SBFM? In short, you can’t ; however, there is one workaround that might work for some setups. IP Access Rules can allow you to exclude an IP or set of IPs from being challenged by SBFM; however, this carries a few issues: IPs can chan…

Mitigating an HTTP DDoS Attack manually with Cloudflare

Update: Mitigating another attack. Context: DDoS protection has detected a lot of suspicious requests, and our backend health checks are failing. Looking at the Cloudflare dashboard, we can see that many requests are being blocked, but still, a lot are reaching our backend system. To handle this situation, we can take the following steps: If you don’t have experience with firewall rules, you can enable UAM (Under Attack Mode) Understanding Cloudflare Under Attack Mode (Advanced DDoS Protec…

For more, in the forum or refer the docs.