F5 AWAF Bot Defense Whitelist

Question

According to https://techdocs.f5.com/en-us/bigip-14-1-0/big-ip-asm-implementations-14-1-0/configuring-bot-defense.html, having whitelists can speed up access time to the website. Is it because WAF will not check those whitelisted URLs coming to the web site, thereby making it faster? (Faster when users access the web site because less traffic to be validated by WAF?)

amine_kadimi · Answer

You either whitelist a source (IP address or geolocation) or a destination (an URL), or a combination of both.
In any case, if the whitelist entry is matched, the system will skip applying bot defense and thus will save time and resources related to processing bot defense module protections (for example behavioral analysis).&nbsp;In case of thousands of concurrent users, this may be appreciated, but for few users you may not notice any performance effect.

Forum Discussion

F5 AWAF Bot Defense Whitelist

Recent Discussions

F5 - System Times of Devices Do Not Match

F5 AWAF Bot Defense Whitelist

specially if they have underlying fitness

When adding new GTM(DNS) to the existing group, if software version is not same, what will happen?

iRule command to allow IP range to access specific URL

Related Content

Bot Management Strategy - Defense against malicious bots with F5 Distributed Cloud Bot Defense

Bot Defense for Mobile Apps in XC WAAP Part 1: The Bot Defense Mobile SDK

OWASP Tactical Access Defense Series: How BIG-IP APM Strengthens Defenses Against OWASP Top 10

F5 Distributed Cloud Bot Defense Protecting AWS CloudFront Distributions

F5 Distributed Cloud Bot Defense (Overview and Demo)