waf ip-intelligence-exception

Use this command to exempt IP addresses from reputation-based blocking. The settings apply globally, to all policies that use this feature.

To use this command, your administrator account’s access control profile must have either w or rw permission to the wafgrp area. For details, see Permissions.

Syntax

config waf ip-intelligence-exception

edit <entry_index>

set status {enable | disable}

set group-type {ip-string | ip-group}

set ip-group <name>

set ip "<client_ipv4>"

next

end

Variable	Description	Default
<entry_index>	Enter the index number of the individual entry in the table entry in the table. The valid range is 1–9,999,999,999,999,999,999.	No default.
status {enable | disable}	Enable to exempt clients from IP reputation-based blocking.	disable
group-type {ip-string | ip-group}	Select ip-string to enter IP addresses or ranges, or ip-group to reference the IP groups you have created through config server-policy ip-group.	ip-string
ip "<client_ipv4>"	Enter the client’s source IP address. Available only when the group-type is ip-string.	No default.
ip-group <name>	If you have selected ip-group for group-type, then specify the IP Group you have created through config server-policy ip-group. By using the IP group, you can save the effort to type the IP addresses every time you need to re-use them. Available only when the group-type is ip-group.	No default.

Example

See waf ip-intelligence-ignore-x-forwarded-for.

Related topics

• waf ip-intelligence-ignore-x-forwarded-for