Technical Tip: How to block 'http_agent="Custom-AsyncHttpClient"' on FortiWebCloud

[gsharma]

Description	This article explains how to block 'http_agent="Custom-AsyncHttpClient"'.
Scope	FortiAppsec Cloud.
Solution	FortiAppSec Cloud can be used to block the traffic coming from 'http_agent="Custom-AsyncHttpClient"'.  For that Custom Rule can be created. To create a Custom Rule for blocking 'http_agent="Custom-AsyncHttpClient"'.   Open the application in which 'Custom-AsyncHttpClient' needs to be blocked. On the left Pan, go to Advanced Application -> Custom Rule. Create a Rule, give the name, and setthe  operation as either Alert/Deny or Period Block. After the rule is made, it is necessary to add Filter, so below the rule select Add Filter ->  Filter-type: HTTP Header -> Header Name: User-Agent. Inside the Value Pattern, fill the RegEx code as '[Cc]ustom-[Aa]sync[Hh]ttp[Cc]lient' (this can be modified based on the http_agent in the traffic logs) select OK, and select Save Filter. Note: If the issue is not resolved, reach out to the support helpline with the required config and logs. The Regex code used above might need to be modified based on the requirement.