Protect your applications with bot management

Azion’s bot management solution uses machine learning to analyze request behaviors and intentions, distinguishing between humans and various bot categories. Upon analysis, each request is scored and classified, allowing for the execution of predefined preventive actions based on customer-set thresholds. This dynamic approach is enhanced by continuous data analysis, enabling the refinement of detection rules for improved efficiency and security. This solution preserves the user experience while countering bot activity.

Use this architecture to mitigate security risks, prevent fraud, keep access open to legitimate users, and reduce the unnecessary traffic that automated clients add to an application.

Bot Management Architecture Diagram

Bot Management Dataflow

1. A request reaches Azion Web Platform.
2. Firewall processes the request and executes the Bot Manager. It starts all the analytics processes:
   • Retrieving the requested data, including device, browser, and network data, among others.
   • Identifying and classifying the request according to the intent-based behavioral analysis.
3. Bot Manager assigns a score and classifies the request.
4. According to the request intent classification, the predefined preventive action is executed, including allow, deny, drop, redirect, custom_html, random_delay, and hold_connection.
5. Data reaches the application, where Rules Engine decides: generate content immediately or route flow to Origin Application for a response.
6. Activity can be observed through Real-Time Events or by using a Data Stream connector to feed event logs into your stream processing, SIEM, and big data platforms.

Components

• Firewall runs the Bot Manager function instance and the other security rules.
• Bot Manager scores each request and applies an action when the score reaches the threshold. It is not a firewall module: it runs as a function instance, selected by a Rules Engine rule.
  • Bot Manager ships in two editions. Bot Manager Lite installs from the Marketplace; the full edition is enabled on request.
• Applications is your application running on top of the Azion Web Platform.
• Data Stream and Real-Time Events enable you to monitor all Bot Manager activity.

Implementation

You can test and implement Azion Bot Manager in two ways:

• Using Azion Templates based on the Bot Manager Lite version: pre-built and pre-configured projects designed to accelerate the implementation of bot management.

  • Bot Manager Lite Starter Kit: with this template, you are able to deploy a new stack and see the Bot Manager Lite in action. To deploy this template, select the button below:

    Deploy Bot Manager Lite Starter Kit

  • Bot Manager Lite Integration Kit: this template integrates the Bot Manager Lite function in an existent firewall on Azion. To deploy this template, select the button below:

    Deploy Bot Manager Lite Integration Kit

  • Bot Manager Lite and TOR Block Starter Kit: deploy a basic security suite to protect your domains from bad bots and TOR Exit Nodes requests. To deploy this template, select the button below:

    Deploy Bot Manager Lite and TOR Block Starter Kit

• From scratch: create an entire stack from zero, including Bot Manager. To do so:

  1. Create an application.
  2. Add a custom domain to it.
  3. Enable Bot Manager.
     • Contact the Sales team for more details on the Bot Manager subscription.
     • Configure Bot Manager Lite if you have decided to use this version.
  4. Monitor bot activity and calibrate rules.

Related resources

• Understand Azion Integrations
• Manage bots with Bot Manager
• Web Application and API Security (WAAP) architecture