We are using the Fortigate 200F running FortiOS v7.4.8 build2795 in front of our web hosting stack. I want to block these AI training bots because they are not respecting robots.txt and using too much bandwidth. I was thinking of using using a custom Application Signature to filter by the user-agent like "ClaudeBot" for example and then create a custom Application Control to block those requests. I found a similar example but could not get it to work. Below is the Application Signature I am using, any help would be much appreciated.
F-SBID( --attack_id 9003; --name "ClaudeBot.Simple.Block"; --protocol tcp; --flow from_client; --seq =,1,relative; --data_size <0x500; --pattern "ClaudeBot/1.0|0d 0a|"; --context packet; --distance 0,context; --weight 20; --app_cat 28; )
Hello,
Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.
Thanks,
Hello,
We are still looking for someone to help you.
We will come back to you ASAP.
Thanks,
Hello,
To block AI training bots from crawling hosted websites using FortiGate, follow these steps:
| User | Count |
|---|---|
| 2712 | |
| 1416 | |
| 810 | |
| 735 | |
| 455 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.