Lists and access control

IP lists

Go to Security Center › Protection settings › Lists.

• Allowlist: skips CC, WAF and other checks, for all paths and rules. It is either permanent or temporary; temporary entries have a duration.
• Denylist: refused directly. IPs banned automatically by the WAF, CC and scanner protection, and IPs banned manually, are all listed here.

Lists can be imported. On import, entries that are in the list but not in the imported content are deleted and the change is pushed to nodes immediately, so click "Pre-check" and review first before confirming.

Access control rules

Access control rules allow or block by IP, UA, referrer, URI, region and other conditions. Create a rule set first, then attach it to a site; every request then goes through this set before the other protections.

Region limits

Allow or block by the visitor's country or region. The region is decided by the node's IP geolocation database, which administrators maintain under Global Settings › IP Geolocation Database.

Hotlink protection

Stops other sites from embedding your resources. You choose what it covers: the whole site, extensions, directories or full paths. The whole site is easiest but also checks the pages themselves; extensions are the most precise.