Traffic control
Bot management
Score and enforce automated client behavior at the edge.
Goal
Configure bot scoring and enforcement so automated traffic is challenged or blocked intentionally.
Prerequisites
- Access to Security → Bot settings.
- Understanding of Challenges if you challenge instead of hard-block.
Steps
- Open Bot management in the console.
- Enable scoring / enforcement according to your risk tolerance.
- Align WAF rules that use
{ "inspector": "botScore" }if you gate via policies. - Publish and watch analytics for false positives (APIs, monitoring agents, partner crawlers).
Tips
- Allowlist known good automation (CI, uptime checks) via IP lists or exemptions.
- Start in a log/detect posture before aggressive enforcement.
Verify
- Browser clients succeed.
- Simple scripted clients receive challenge or deny as configured.