- name: no-user-agent-string
  action: DENY
  expression: userAgent == ""