Block definitely automated traffic but allow our own web-application vulnerability scanner

[user80411]

Would it be possible to configure Configure “Super Bot Fight Mode/Definitely automated/Block” without blocking our weekly scheduled web-application scanner by creating for example a white listed IP in the WAF? Or any other solution for this issue. Our company has a Business plan.

[fritex]

@user80411

Would it be possible to configure

Yes, there is a workaround.

@user80411

for example a white listed IP in the WAF

The easiest way would be to add the IP to the Security → Tools → IP Access Rules with the action “allow”.

Create an IP Access rule · Cloudflare Web Application Firewall (WAF) docs

Helpful article:

Super Bot Fight Mode - What to know

Introduction While blocking bots is appealing, we often find in the community that people run into issues while using Super Bot Fight Mode (SBFM). Below you can find a quick summary of the most common questions. How to create a bypass rule for SBFM? In short, you can’t ; however, there is one workaround that might work for some setups. IP Access Rules can allow you to exclude an IP or set of IPs from being challenged by SBFM; however, this carries a few issues: IPs can chan…