Description
- An allowlisted visitor is any traffic that is on the trusted allowlist for the application protected by Silverline Shape Defense. No allowlisted visitor is served a Silverline JS client page.
- Silverline Shape Defense and Shape Enterprise Defense (SSD and SED) allowlisting is configured via Silverline iRule Data Tables
- Allowlisting is most relevant to Web Scraping Protection
- There are 2 types of Shape Defense allowlists:
- Source IP Address allowlist
- HTTP Header allowlist
- This article has configuration steps for both types of Shape Defense allowlists
Environment
- Silverline Shape Defense
- Bot defense
- Bot protection
- Anti-bot
- iRule Data Tables
- Allowlists (formerly known as Whitelists)
Procedure
Source IP Address Allowlist
- Note: Source IP allowlist is processed first, followed by the HTTP Header allowlist
How to Configure
-
- In the Silverline Portal, navigate to Config > Proxy/App Configuration > iRule Management
- Click Add button
- Create a Data Table named: SHAPE_allowlist_ip of type “IP Profile”
- Silverline Shape Defense only looks for Data Tables with these specific names.
- Populate it with the Source IP addresses which should bypass processing by Silverline Shape Defense.
NOTE: This procedure works for both SED and SSD.
HTTP Header Allowlist
- Note: Source IP allowlist is processed first, followed by the HTTP Header allowlist
- Note: HTTP Header allowlist looks for both the header name and value to be set to perform an allowlist action.
How to Configure
-
- Create a Data Table names: SHAPE_allowlist_header of type String
- Silverline Shape Defense only looks for Data Tables with these specific names.
- Populate it with the Key set to the HTTP Header name and the Value of the HTTP Header value to be allowlisted
- Create a Data Table names: SHAPE_allowlist_header of type String
Related Content
- Getting Started with Silverline Shape Defense Web Scraping
- Q&A: How does Silverline Shape Defense Web Scraping Protection Work?
- How to Configure Silverline Shape Defense Web Scraping Protection
- How to Validate Silverline Shape Defense Web Scraping Protection