5 ms·

(I’m responsible for Cloudflare’s L7 security products) While we can’t comment on the specifics of any customer configuration, we do not block or challenge Fir

(I’m responsible for Cloudflare’s L7 security products) While we can’t comment on the specifics of any customer configuration, we do not block or challenge Firefox by default—either with our Bot Management products or with any other L7 security controls. You can confirm this by signing up a free zone and making a request from Firefox.

judge2020 4y ago
To add, without knowing the homepage firewall rule g2 has set up, we won't know exactly what sort of rules is triggering this, although the most likely signals they're using are either bot scores[0] or threat scores[0]. 0: https://developers.cloudflare.com/bots/concepts/bot-score/ https://developers.cloudflare.com/bots/concepts/bot-score/ 1: https://support.cloudflare.com/hc/en-us/articles/200170056-Understanding-the-Cloudflare-Security-Level https://support.cloudflare.com/hc/en-us/articles/200170056-U...
- prdonahue 4y ago
  Appreciate the speculation, but using Firefox does not increase your likelihood of being flagged as a bot nor does it increase your threat score.
  - alaricus 4y ago
    Care to back that up with data? The link above is demonstrating the opposite.
    - _HMCB_ 4y ago
      - kevin_thibedeau 4y ago
        > The JavaScript Detections (JSD) engine identifies headless browsers and other malicious fingerprints. Blocking JS is not malicious.
        seba_dos1 4y ago
        Neither are headless browsers.
    - vnkr 4y ago
    - Handytinge 4y ago
      They're the person responsible for this product at Cloudflare. Is that not enough to back it up?
deleted 4y ago
[deleted]
tyingq 4y ago
You're saying there's not a simplistic "block Firefox rule" right? But, the user agent is surely one of the weighted features going into your ML stew. So it's plausible the poster is seeing that Firefox sends some calculation over the edge and causes blocking for them. That is, you're not saying "Firefox doesn't change the scoring at all", right?
tomjen3 4y ago
Can customers configure Firefox as one of the criteria for a challenge?
- vnkr 4y ago
  Customers can create firewall rules to challenge requests using any type of request metadata. User agent is one of the filters, that can be used in manual Firewall fields.
alaricus 4y ago
alaricus 4y ago
- vnkr 4y ago
  By “this” do you mean the fact that “we do not block or challenge Firefox by default”?
deleted 4y ago
[deleted]

judge2020 4y ago

To add, without knowing the homepage firewall rule g2 has set up, we won't know exactly what sort of rules is triggering this, although the most likely signals they're using are either bot scores[0] or threat scores[0]. 0: https://developers.cloudflare.com/bots/concepts/bot-score/ https://developers.cloudflare.com/bots/concepts/bot-score/ 1: https://support.cloudflare.com/hc/en-us/articles/200170056-Understanding-the-Cloudflare-Security-Level https://support.cloudflare.com/hc/en-us/articles/200170056-U...

prdonahue 4y ago
Appreciate the speculation, but using Firefox does not increase your likelihood of being flagged as a bot nor does it increase your threat score.
- alaricus 4y ago
  Care to back that up with data? The link above is demonstrating the opposite.
  - _HMCB_ 4y ago
    - kevin_thibedeau 4y ago
      > The JavaScript Detections (JSD) engine identifies headless browsers and other malicious fingerprints. Blocking JS is not malicious.
      - seba_dos1 4y ago
        Neither are headless browsers.
  - vnkr 4y ago
  - Handytinge 4y ago
    They're the person responsible for this product at Cloudflare. Is that not enough to back it up?

deleted 4y ago

[deleted]

tyingq 4y ago

You're saying there's not a simplistic "block Firefox rule" right? But, the user agent is surely one of the weighted features going into your ML stew. So it's plausible the poster is seeing that Firefox sends some calculation over the edge and causes blocking for them. That is, you're not saying "Firefox doesn't change the scoring at all", right?

tomjen3 4y ago

Can customers configure Firefox as one of the criteria for a challenge?

vnkr 4y ago
Customers can create firewall rules to challenge requests using any type of request metadata. User agent is one of the filters, that can be used in manual Firewall fields.

alaricus 4y ago

vnkr 4y ago
By “this” do you mean the fact that “we do not block or challenge Firefox by default”?

deleted 4y ago

[deleted]