Proxy action for user-agent blocking with regular expressions not blocking

Question

I have a server behind a Watchguard XTM firewall and want to block incoming RESTClients who has certain user-agents in their request headers. I have implemented several rules to do this:

List image

Here's one example of how I implemented them:

Regex implementation

For practice, I would like to use the following regex to block incoming request headers with User-Agents like:

binlar|casper|checkprivacy|cmsworldmap|comodo|curious|diavol|doco

But none of my rules has any actions when I test them.

Any ideas?

Answer 1

This does not look like proper regular expression syntax. Try it like this:

User-Agent:.*(binlar|casper|checkprivacy|cmsworldmap|comodo|curious|diavol|doco).*

That should match all User Agents that have one of those strings in them.