I am using some firewall rules namely:
Allow good bots and bots for services I use.
Js challenge traffic from countries other than top 25 countries from which traffic comes to my site.
Js challenge for threat score equal or greater than 10.
How can I better secure my site from bad bots from those 25 countries? I don’t want to hurt user experience.
Other than that, I also want to know what is optimum security level and cache period.