Website Migration Notice: SafePoint is now operated by CyberServal.Learn more →
DiscussionSLA

False positive JA4

Published 5 months ago

# SafeLine WAF
# 🐞 bug

Published 5 months ago

profile_photo

Remi

Updated 5 months ago

0

When I try to verify my websites with Google Search Console, they are blocked due to false positives.
resim.png

profile_photo

Carrie

Updated 5 months ago

0

We would first recommend setting an allow rule for Google’s official IP ranges.
Or would it be possible to temporarily disable the JA4 fingerprint deny rule during the Google verification process?

profile_photo

Remi

Updated 5 months ago

0

When I realized it, I had already written an allow rule for this JA4. My suggestion is that a group of JA4 instances like this could be offered by Safeline, just like "Search Engine Spider".

profile_photo

Carrie

Updated 2 months ago

0

Hi Remi,
We don’t provide a ready-made JA4 library for services like Google Search Console because:
1. Maintaining such a library is complex and requires constant updates due to browser and device changes.
2. Predefined fingerprints could introduce security risks or allow unintended traffic to bypass protections.
3. It’s safer and more flexible to let users configure allow rules for trusted IPs or UAs themselves.

False positive JA4 | CyberServal | CyberServal