For any Barracuda Web Application Firewall service, the client profile can be enabled only when Enable Client Profile Validation is set to Yes. This means that the request must be validated against the configured client’s fingerprint of that service. The details of each client’s risk score are recorded as logs and are available in the BASIC > Access Logs page.

Configure the Risk Score Levels for Clients

1. Go to SECURITY POLICIES > Client Profile.

2. Set Enable Client Profile Validation to Yes to enable client risk score validation on client fingerprints.
   Recommended: Yes

3. In the Client Risk Score Thresholds section, do the following:

   1. Suspicious Clients - Configure the risk score levels for suspicious clients.
      Range: 1 to 100
      Recommended: 60

   2. Bad Clients - Configure the risk score levels for bad clients.
      Range: 1 to 100
      Recommended: 80

4. In the Exempted Clients section, do the following:

   1. Exempted Fingerprints - Click Add to add client fingerprints for exempted clients.