Configure the Bot Allowlist Policy
Important: Bot Defense self-service policy management is an early access feature.
Configure an allowlist policy that allows requests from entries on the list to reach the origin server without being evaluated by Bot Defense. For example, you might choose to add vulnerability scanners, QA tools or health monitors to your allowlist policy. You can define allowlist policy entries by IP address, IP prefix or IP address range.
To configure an allowlist policy:
-
From the Bot and Risk Management navigation menu, select Manage > Bot & Risk Policies and then select Allowlist Policy.
-
From the list of saved allowlist policies, in the Actions column, select the Action menu (…) next to the policy you want to configure.
If you're configuring an allowlist policy for the first time, it's likely that you only have one saved policy version.
-
Select Manage Configuration and then select Edit Configuration.
-
In the IP Allowlist section:
- To add an entry by either IP address or IP prefix, in the IP & IP Prefix section, select Add. Select one of the following client identifiers:
- IP Address: Enter a Value, such as 172.16.0.0.
- IP Prefix: Enter a Value, such as 172.16.0.0/12.
- When you finish, select Apply.
- To add an entry by either IP address or IP prefix, in the IP & IP Prefix section, select Add. Select one of the following client identifiers:
-
To add an entry by IP address range, in the IP Range section, select Add and then enter the start and end of the IP range. Then select Apply.
-
When you finish making changes, select Save Bot Allowlist Policy.
-
From the the Choose Action drop-down menu, select one of the following options:
- Save Final & Deploy: The policy version is saved and immediately deployed to the Bot Defense infrastructure that you select:
- In the Available Bot Infrastructure section, select the infrastructure where you want to deploy the policy.
- Select the checkbox to acknowledge the legal agreement.
- Select Save Final & Deploy.
Important: F5 recommends that you deploy and thoroughly test your policies in your Test environment before you move policy updates to your production environment.
- Save Final: The policy version is saved and added to the list of policy versions that you can deploy in your Bot infrastructure.
- Select the checkbox to acknowledge the legal agreement.
- Select Save Final.
- Save as Draft: You or another administrator can review and finalize this policy version later.
- Select the checkbox to acknowledge the legal agreement.
- Select Save as Draft.
Important: Other administrators can make changes that overwrite your saved draft. Before you deploy your policy update, review the policy settings to make sure they are correct.
- Save Final & Deploy: The policy version is saved and immediately deployed to the Bot Defense infrastructure that you select:
Next steps
When you finish configuring your allowlist policy version and are ready to deploy the version, see Deploy policy updates.
Important: F5 recommends that you first deploy and test new policy versions in your test environment to make sure the system behaves as you intended before you deploy in a production environment. For information, see Test Bot Defense.