// vendor intelligence
what radware bot manager detects
radware bot manager is a edge-waf vendor. it declares strong tls / network fingerprint (2/3), strong ip reputation (2/3), strong js fingerprint (2/3), strong behavioral (2/3), strong challenge (2/3), strong server coherence (2/3) capability. below: the layers it enforces and the cookie, endpoint, and header tells it leaves.
enforced detection layers
| detection layer | capability | what it covers |
|---|---|---|
| tls / network fingerprint | 2/3 strong | the ja3/ja4 clienthello and http/2 settings signature the edge reads before any javascript runs. |
| ip reputation | 2/3 strong | asn, proxy-class, and abuse-history scoring of the connecting address. |
| js fingerprint | 2/3 strong | canvas, webgl, navigator, font, and audio signals collected in-page. |
| behavioral | 2/3 strong | mouse, keyboard, and timing biometrics read from interaction cadence. |
| challenge | 2/3 strong | interactive or invisible captcha and proof-of-work gates. |
| attestation | unaddressed | hardware or os-backed integrity checks (webauthn, play integrity, device attestation). |
| server coherence | 2/3 strong | cross-checking headers, tls, ip, and js for internal consistency. |
unaddressed means this tool type does not operate at that layer, so it is not a failing score. a red 0/3 is a real, declared score of zero. both are declared capability, not live pass-rates.
tells
- cookies
- _rbm_ (session), validatecookie
- endpoints
- /shieldsquare/ or per-tenant collector (ex-shieldsquare)
- header tells
- shieldsquare, radware, x-ss-
ex-shieldsquare intent-based bot manager; js collector + crypto-challenge feed a per-request classification (human/good-bot/bad-bot), enforced inline or via captcha.
questions
- what does radware bot manager detect?
- it declares strong tls / network fingerprint (2/3), strong ip reputation (2/3), strong js fingerprint (2/3), strong behavioral (2/3), strong challenge (2/3), strong server coherence (2/3) capability. layers not listed are not enforced by radware bot manager.
- what are radware bot manager's tells?
- header/script tells: shieldsquare, radware, x-ss-. cookies: _rbm_ (session), validatecookie. endpoints: /shieldsquare/ or per-tenant collector (ex-shieldsquare).
other vendors
where to go from here
layer intensities are catalog-declared (0..3), speculative, and the catalog carries no capture date for this record. layer definitions in the glossary.