Skip to main content
AEK
SuperUser
SuperUser
February 1, 2025
Question

How to prevent auto clicker with FortiWeb

Hi FWB admins

Any idea on how can protect web server from auto clicker with FortiWeb?

6 replies

Anthony_E
Staff
Staff
February 4, 2025

Hello Abdelkrim,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Best Regards
AEK
SuperUser
AEKAuthor
SuperUser
February 4, 2025

Thanks Anthony.

AEK
Anthony_E
Staff
Staff
February 6, 2025

Hello Abdelkrim,

 

We are still looking for someone to help you.

We will come back to you ASAP.


Regards,

Best Regards
AEK
SuperUser
AEKAuthor
SuperUser
February 6, 2025

I think a workaround can be done with reCAPTCHA. But I wonder if there is a better solution for this case.

AEK
Anthony_E
Staff
Staff
February 10, 2025

Hi Abdelkrim,

 

I hope you are doing well :)!

 

I may found an answer for you:

 

To prevent auto clicker attacks using FortiWeb, you can utilize the WAF (Web Application Firewall) features to set up rules that detect and block suspicious behavior. Here are the steps to help prevent auto-clicker attacks:

  1. Configure Rate Limiting: Set up rate limiting rules in FortiWeb to limit the number of requests from a client within a specific time frame. This can help prevent automated tools like auto clickers from generating excessive requests.
  2. Utilize Bot Recognition: Enable bot recognition features in FortiWeb to distinguish between human users and automated tools. You can set actions to be taken when automated behavior is detected, such as returning a JavaScript challenge to verify if it's a real browser.
  3. Implement CAPTCHA Enforcement: If necessary, enable CAPTCHA enforcement in FortiWeb to add an additional layer of security. This can help differentiate between human users and bots by requiring users to complete a CAPTCHA challenge.
  4. Monitor and Analyze Traffic: Regularly monitor and analyze traffic patterns using FortiWeb's reporting and analytics tools. Look for unusual spikes in traffic or repetitive patterns that may indicate auto-clicker activity.
Best Regards
AEK
SuperUser
AEKAuthor
SuperUser
February 10, 2025

Hi Anthony

Hope you are doing fine too.

Thanks for your suggestion. The first and third seem worth a try.

AEK
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT