Allow Google bot with rules

Thanks!

I’m a newbie so thanks for helping.

I checked events and searched for ‘Google’ and found a bunch of their ips that were blocked by a challenge. I cannot see how my rules are blocking them. Instead, I allowlisted their ASN, and that appears to have worked. Now, with firewall rules on, Google is able to crawl pages in search console instead of giving me 403 errors.

Is it correct that allowlisting like this trumps my rule with js challenge?

Thanks
Marcus