​

Manage Bot policies

Published April 5, 2023 | Last modified November 12, 2026

Important: Bot Defense self-service policy management is an early access feature.

The F5 Distributed Cloud Console lets you view and manage your currently deployed Bot Endpoint Policies, Bot Allowlist Policies and Bot Network Polices. For example, you can protect additional endpoints, change mitigation actions or update your routing information and then deploy new policy versions. You can also view previous policy versions. If you need help managing policies, contact your F5 Operations team.

Protect additional web-based endpoints

After you initially deploy your Bot Endpoint Policy, as your IT environment evolves, it might be necessary to protect additional endpoints. To protect an additional endpoint, you must create a new version of the policy.

Note: To protect additional mobile endpoints, see Protect a new mobile endpoint.

  1. From the Bot and Risk Management navigation menu, select Manage > Bot & Risk Policies and then select Endpoint Policy.
  2. From the list of saved endpoint policies, in the Actions column, select the Action menu (...) next to the most recent policy version.
  3. Select Manage Configuration and then select Edit Configuration.
  4. To add a new protected endpoint, in the Protected Endpoints section, select Add and then provide information about the endpoint. For information about specific configuration fields, see Configure the Bot Endpoint Policy.
  5. When you finish adding endpoints, select Apply and then select Save Bot Endpoint Policy.
  6. Choose one of the following options:
    • Save Final & Deploy: The policy version is saved and immediately deployed to the Bot Defense infrastructure that you select.
    • Save Final: The policy version is saved and added to the list of policy versions that you can deploy in your Bot infrastructure.
    • Save as Draft: You or another administrator can review and finalize this policy version later.
  7. To deploy your new policy version, see Deploy policy updates.

View policy version history and details

You can view history and policy details for previous versions of each Bot Policy type.

  1. From the Bot and Risk Management navigation menu, select Manage > Bot & Risk Policies and then select either Endpoint Policy, Allowlist Policy or Network Policy.
  2. From the list of saved policy versions, in the Actions column, select the Action menu (...) next to the policy you want to view and then select Endpoint Policy Versions, Allowlist Policy Versions or Network Policy Versions, depending on the type of policy you want to view.
  3. In the Policy Versions box, in the Actions column, select the Action menu (...) next to the version you want to view and select View Version Configuration to view additional policy details.
  4. To exit, select the X on the Policy Versions panel to close the panel.

Download a policy JSON file

For each of your individual policies, you can download a JSON file that contains the details of the policy.

To download the JSON file:

  1. From the Bot and Risk Management navigation menu, select Manage > Bot & Risk Policies and then select Endpoint Policy, Allowlist Policy or Network Policy.
  2. From the list of saved policies, in the Actions column, select the Action menu (...) and then select Endpoint Policy Versions, Allowlist Policy Versions or Network Policy Versions, depending on the type of policy you want to view.
  3. From the list of saved policy versions, in the Actions column, select the Action menu (...) and then select Download JSON. The JSON file downloads to the download location configured in your browser.
  4. When the download completes, select the X on the Policy Versions panel to close the panel.

Change mitigation actions

After you initially deploy your Bot Endpoint Policy, it might be necessary to change the mitigation actions you configured for your endpoints. For example, you might have initially deployed your endpoint policy with the mitigation action set to Continue so traffic continues to the origin. When you decide to begin mitigating traffic, you might change the mitigation action to Redirect or Block so automated traffic no longer reaches the origin.

  1. From the Bot and Risk Management navigation menu, select Manage > Bot & Risk Policies and then select Bot Endpoint Policy.
  2. From the list of saved endpoint policies, in the Actions column, select the Action menu (...) next to the most recent policy version.
  3. Select Manage Configuration and then select Edit Configuration.
  4. In the Actions column, next to the protected endpoint you want to edit, select Edit.
  5. Scroll to Mitigation action and select a new mitigation action.
  6. Select Apply and then select Save Bot Endpoint Policy.
  7. Choose one of the following options:
    • Save Final & Deploy: The policy version is saved and immediately deployed to the Bot Defense infrastructure that you select.
    • Save Final: The policy version is saved and added to the list of policy versions that you can deploy in your Bot infrastructure.
    • Save as Draft: You or another administrator can review and finalize this policy version later.
  8. To deploy a new policy version, see Deploy policy updates.

Revert to a previous policy version

It might be necessary to revert to a previous policy version if a recent change has created an unintended consequence or if a change in your IT environment makes a previous policy more desirable.

When you revert to a previous policy version, the current version remains available in the system if you decide that it's necessary to return to that latest policy version.

Policy changes take effect immediately, so before you revert to a previous policy version, make sure you know what the results of the change are.

  1. From the Bot and Risk Management navigation menu, select Manage > Bot Infrastructure.
  2. In the Actions column, next to the Bot infrastructure where you want to revert a previous policy version, select the Action menu (...) and then select Deploy Policy Versions.
  3. For the policy you want to update, select the Policy Name and Deployment Version to which you want to revert.
  4. Select the checkbox to acknowledge that you understand that Bot Defense deploys policy changes immediately.
  5. Select Deploy. Then select Show Bot Infrastructure Status to view the deployment status for the Bot infrastructure you updated.

Copy the API key

If you use Bot Defense in API mode, when requested by F5 Support, copy the API key from an Endpoint Policy version.

  1. From the Bot and Risk Management navigation menu, select Manage > Bot & Risk Policies and then select Endpoint Policy.
  2. From the list of saved endpoint policies, in the Actions column, select the Action menu (...) next to the policy for which you want to copy the API key. The Deployment Mode for the policy must be API.
  3. From the Action menu (...), select Copy API Key.
  4. Paste and save the API key. Provide the key to F5 Support when requested.
On this page: