Bot Detection

Path: System Configs > Bot Detection

In this section, you can find instructions on how to strengthen API management by configuring Allow List (whitelist) for enhanced access control with minimum necessary permissions. The system can simulate the client environment to detect and block bot attacks.

Enable/Disable Bot Detection

To enable or disable Bot Detection, check Y or N, and click Update to apply the changes.

Add Allow Lists

1. Click on the icon to add an allow list entry.

1. Fill in the data or make selections as instructed below. The fields marked with “*” are required.

• ID: The identifier for the User-Agent, automatically generated by the system.

• Rule*: Supports regular expressions.

  • Example input: .*Postman.*

    • This searches for any API that contains the string "Postman".

    • "." (dot): Matches any single character (excluding newline characters).

    • "*" (asterisk): Matches the preceding element zero or more times.

    • Instructions: This regular expression will match successfully as long as the User-Agent name contains "Postman" regardless of any characters that precede or follow it, or even if there are no other characters.

1. Click Update to apply the changes.

Delete Allow Lists

1. Click on the icon to delete the selected allow list entry.

1. Click Update to apply the changes.