Unanswered

Session limiting/blocking to prevent bot attacks

(0) Share

Report

Posted on by noelDanas

I am currently working on a solution to thwart bots from unnecessarily utilizing the chatbot and, subsequently, consuming PVA sessions. Our approach involves the utilization of the live chat widget script, initially generated through the Customer Centre, which is routed first through Omnichannel and then to PVA. Based on my understanding, when a user engages with a system topic, it results in the consumption of a session. Is there a method to enforce some form of session restriction for the same IP address via PVA or Omnichannel?

Categories:

General topics

I have the same question (0)

All responses (2)

Answers (0)

abhi_r on at

Like (0)

Report

hi @noelDanas, PVA has a internal rate limit of 800 RPM, so if the bot is experiencing a DDoS attack, we will throttle the requests and the bot will be unresponsive. One other option is to present the user with a captcha at the beginning of the conversation, to avoid automated bot attacks.
More info here: https://learn.microsoft.com/en-us/power-virtual-agents/requirements-quotas

Was this reply helpful? Yes No
noelDanas 2 on at

Like (0)

Report

Thank you for your reply, Yes i am aware that there is a limit of 800RPm but still sessions are consumed. Regarding the captcha, if the website is inspected and the JavaScript snippet is extracted, it can be embedded in an HTML file, effectively bypassing the captcha.

Was this reply helpful? Yes No