| Description | This article describes why traffic logs can be found showing HTTP requests to the /fwbbot_check URL, even though the backend server does not have this path. |
| Scope | FortiWeb. |
| Solution |
This path is related to the ML Bot detection feature where when the Real Browser Enforcement verification method is used, FortiWeb injects a javascript to verify whether the user is a normal browser and not a bot so that the collected samples can be filtered. However, FortiWeb will only insert JavaScript into pages where the response is HTML.
Related document: |
