How to prevent auto clicker with FortiWeb

[AEK]

Hi FWB admins

Any idea on how can protect web server from auto clicker with FortiWeb?

[Anthony_E]

Hello Abdelkrim,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[AEK]

Thanks Anthony.

[Anthony_E]

Hello Abdelkrim,

We are still looking for someone to help you.

We will come back to you ASAP.

Regards,

[AEK]

I think a workaround can be done with reCAPTCHA. But I wonder if there is a better solution for this case.

[Anthony_E]

Hi Abdelkrim,

I hope you are doing well :)!

I may found an answer for you:

To prevent auto clicker attacks using FortiWeb, you can utilize the WAF (Web Application Firewall) features to set up rules that detect and block suspicious behavior. Here are the steps to help prevent auto-clicker attacks:

1. Configure Rate Limiting: Set up rate limiting rules in FortiWeb to limit the number of requests from a client within a specific time frame. This can help prevent automated tools like auto clickers from generating excessive requests.
2. Utilize Bot Recognition: Enable bot recognition features in FortiWeb to distinguish between human users and automated tools. You can set actions to be taken when automated behavior is detected, such as returning a JavaScript challenge to verify if it's a real browser.
3. Implement CAPTCHA Enforcement: If necessary, enable CAPTCHA enforcement in FortiWeb to add an additional layer of security. This can help differentiate between human users and bots by requiring users to complete a CAPTCHA challenge.
4. Monitor and Analyze Traffic: Regularly monitor and analyze traffic patterns using FortiWeb's reporting and analytics tools. Look for unusual spikes in traffic or repetitive patterns that may indicate auto-clicker activity.

[AEK]

Hi Anthony

Hope you are doing fine too.

Thanks for your suggestion. The first and third seem worth a try.