Manage Bot Policies

Important: Bot Defense Self-Service Policy Management is an Early Access feature.

The Distributed Cloud Console lets you view and manage your currently deployed polices. For example, you can protect additional endpoints, change mitigation actions or update your routing information and then deploy new policy versions. You can also view previous policy versions. If you need help managing policies, contact your F5 Operations team.

Protect Additional Endpoints

After you initially deploy your Bot Endpoint Policy, as your IT environment evolves, it might be necessary to protect additional endpoints. To protect an additional endpoint, you must create a new version of the Bot Endpoint Policy.

1. From the Bot Defense navigation menu, click Manage > Bot Policies and then click Bot Endpoint Policy.
2. From the list of saved Bot Endpoint Policies, in the Actions column, click the Action menu (…) next to the most recent policy version.
3. Click Manage Configuration and then click Edit Configuration.
4. To add a new protected endpoint, in the Protected Endpoints section, click Add Item and then provide information about the endpoint. For information about specific configuration fields, see Configure the Bot Endpoint Policy.
5. When you finish adding endpoints, click Apply and then click Save Bot Endpoint Policy.
6. Choose one of the following options:
   • Save Final: The policy version is saved and added to the list of policy versions that you can deploy in your Bot infrastructure.
   • Save as Draft: You or another administrator can review and finalize this policy version later.
7. To deploy your new policy version, see Deploy Policy Updates.

View Policy Version History and Details

You can view history and policy details for previous versions of each Bot Policy type.

1. From the Bot Defense navigation menu, click Manage > Bot Policies and then click either Bot Endpoint Policy, Bot Allowlist Policy or Bot Network Policy.

2. From the list of saved policy versions, in the Actions column, click the Action menu (…) next to the policy you want to view and then click Endpoint Policy Versions, Allowlist Policy Versions or Network Policy Versions, depending on the type of policy you want to view.

3. In the Policy Versions box, in the Actions column, click the Action menu (…) next to the version you want to view and click Manage Configuration to view additional policy details.

4. To exit, click the X on the Policy Versions panel to close the panel.

   

   Figure: Policy Versions

Download a Policy JSON File

For each of your individual policies, you can download a JSON file that contains the details of the policy.

To download the JSON file:

1. From the Bot Defense navigation menu, click Manage > Bot Policies and then click either Bot Endpoint Policy, Bot Allowlist Policy or Bot Network Policy.
2. From the list of saved policies, in the Actions column, click the Action menu (…) and then click Endpoint Policy Versions, Allowlist Policy Versions or Network Policy Versions, depending on the type of policy you want to view.
3. From the list of saved policy versions, in the Actions column, click the Action menu (…) and then click Download JSON. The JSON file downloads to the download location configured in your browser.
4. When the download completes, click the X on the Policy Versions panel to close the panel.

Change Mitigation Actions

After you initially deploy your Bot Endpoint Policy, it might be necessary to change the mitigation actions you configured for your endpoints. For example, if you initially deployed your Bot Endpoint Policy with the mitigation action set to Continue so traffic continues to the origin, when you decide to begin mitigating traffic, you might change the mitigation action to Redirect or Block so that automated traffic no longer reaches the origin.

1. From the Bot Defense navigation menu, click Manage > Bot Policies and then click Bot Endpoint Policy.

2. From the list of saved Bot Endpoint Policies, in the Actions column, click the Action menu (…) next to the most recent policy version.

3. Click Manage Configuration and then click Edit Configuration.

4. In the Actions column, next to the protected endpoint you want to edit, click Edit.

   

   Figure: Edit a Protected Endpoint

5. Scroll to Mitigation action and select a new mitigation action.

6. Click Apply and then click Save Bot Endpoint Policy.

7. Choose one of the following options:

   • Save Final: The policy version is saved and added to the list of policy versions that you can deploy in your Bot infrastructure.
   • Save as Draft: You or another administrator can review and finalize this policy version later.

8. To deploy a new policy version, see Deploy Policy Updates.

Revert to a Previous Policy Version

It might be necessary to revert to a previous policy version if a recent change has created an unintended consequence or if a change in your IT environment makes a previous policy more desirable.

When you revert to a previous policy version, the current version remains available in the system if you decide that it is necessary to return to that latest policy version.

Policy changes take effect immediately, so before you revert to a previous policy version, make sure you know what the results of the change are.

1. From the Bot Defense navigation menu, click Manage > Bot Infrastructure.
2. In the Actions column, next to the Bot infrastructure where you want to revert a previous policy version, click the Action menu (...) and then click Deploy Infrastructure.
3. For the policy you want to update, select the Policy Name and Deployment Version to which you want to revert.
4. Select the checkbox to acknowledge that you understand that Bot Defense deploys policy changes immediately.
5. Click Deploy. Then click Show Bot Infrastructure Status to view the deployment status for the Bot infrastructure you updated.

---