Thanks. I do read the following from your link though:
Bot Fight Mode can still trigger if you have IP Access rules, but it cannot trigger if an IP Access rule matches the request. For example, the IP Access rule matches the connecting IP.
This seems to insinuate that the bot fight mode won’t trigger if an IP access rule matches the request. Or in other words, it would be possible to bypass from IP access rules, although this isn’t necessarily very useful.
Just to confirm for anyone curious. You CAN bypass bot fight mode with WAF IP Access Rules [Allow], but not by WAF custom rules. In other words, you can’t bypass bot fight mode based on useful conditions like host name, path or user agent.