Blocking User Agents

Many requests include obvious indicators that they aren't coming from a human using a web browser, but rather a Python app, Curl script, or another automated requesting mechanism.

If you identify a malicious user agent, you can block it from the Block Bots page of your Expedited WAF dashboard by adding a user agent Blocking Rule:

Add User Agent Rule panel with an input for a user agent string and a list of currently blocked user agents

You can also filter aggressive bots by enabling the setting on the Block Bots page that validates user agents before allowing requests through to your Heroku application.