Bot management + firewall rules as free plan

Hi everyone,

It’s not a technical issue but a general question

What is the domain name?
Any

Have you searched for an answer?
Yes on your docs, but can’t find a clear anwser to my question

Please share your search results url:
Radar verified bots on Cloudflare
Articles regarding bot management (talking about all plans)

Describe the issue you are having:
It’s not an issue but a question :
Does the bot management on free plan skip the firewall rules ?
Because one of my website use the Mercanet (french solution) payment which call my website for updating state of order payments. So I’ve allowed the IP address in the WAF in order to be sure the request are done successfully.
But I tried few years ago to enable bot management, and it has blocked the Mercanet requests.

Thanks in advance for your help

Bot Management specifically is the Enterprise product, the free plan has Bot Fight Mode.

The WAF or Page Rules cannot bypass Bot Fight Mode. IP Access Rules might work to whitelist an IP address.

Ok but IP Access Rules is a part of the WAF, then it shouldn’t be working ? Am I wrong ?

Yes & no.

IP Access Rules run before Bots, whereas WAF runs after bots, so the ‘WAF’ in regards to firewall rules cannot override Bots.

Oh! I didn’t notice the order of each tool which have an impact on the traffic!
Thanks a lot for this explanation, it didn’t make sense to me at first time.

Then perfect!

1 Like

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.