F5 Distributed Cloud Bot Defense

We deploy F5 Distributed Cloud Bot Defense on our client facing apps, internal ERP portals and API gateways. It is so good at inspecting behavior signals before traffic reaches our core infrastructure. Our team is actively engaging it to auto mitigate non human interactions without disrupting legitimate users.

• Zero unauthorized scraping of commercial data for 3 consecutive quarters
• We improved uptime on inventory APIs by 40 percent during high traffic windows

Cloudflare

Microsoft Sentinel, Splunk Enterprise Security

We discovered that typical WAFs fail against low and slow bot traffic that mimics real user journeys. Anyone currently active in SOC can confirm how bots have gotten good in the last half 3 years. We were facing the challenge of bots hitting our clients' search and filter endpoints with really high velocities and copying legit paginations - especially those in retail and finance ticketing. We shopped around and settled on F5 Distributed Cloud Bot Defense. It's now a company standard for us, in every use-case where business logic is exposed.

• We have a case study where a client's login endpoints was seeing spikes in the thousands in credential attempts per day, most of which were bots using credential dumps. These weren't high velocity attacks, so they flew under the radar of basic WAFs. Those came down by over 90 percent since F5 Distributed Cloud Bot Defense implementation

AWS WAF

Splunk Enterprise Security, AWS App Mesh

We are mostly using it on login portals, signup forms, cart pages, pricing tools and search endpoints. These areas tend to attract credential stuffing, scarping and account takeovers especially for fintech and e-com clients. We deploy it through the main cloud platform, integrated with both our edge proxy and app backend.

• Prior to F5 Distributed Cloud Bot Defense, we were averaging 12k plus credential stuffing attempts weekly across client portals That number fell down to less than a thousand in just 4 weeks
• Over 90 percent of scraping and unauthorized price harvesting blocked

Splunk Enterprise Security, Microsoft Sentinel, (EOL) Cisco CloudCenter

We've been dealing with bots creating fake subcontractor profiles to harvest bid data and influence timelines. We are using F5 Distributed Cloud Bot Defense to automatically filter traffic before it even hits the backend.

Also, many of our partners reuse passwords across platforms. We had a rising trend of bot driven that were hard to distinguish from legit access. F5 Distributed Cloud Bot Defense sorts this out for us.

• The biggest roi for us has been bid integrity and cost control. I talked about this in the first question. It has improved our bid qualification time by almost half
• An almost 100 percent reduction in credential stuffing incidents
• huge savings in time since we are not reviewing the login patterns manually.

Cloudflare

Splunk SOAR, AWS Auto Scaling, Atlassian Jira

Probamos el producto, puntualmente bot defense y waf. realmente cumplió con las expectativas y tenemos.mucho mas para aprender y aplicar. Iremos aplicando otras características de a poco.

We tested the product, specifically F5 Distributed Cloud Bot Defense and WAF. It truly lived up to expectations, and we have much more to learn and apply. We'll gradually implement other features.

• Reduction of attacks

Shape

F5 BIG-IP Access Policy Manager (APM), F5 BIG-IP Local Traffic Manager (LTM), F5 BIG-IP DNS