[Request] Add country to white list.

[contact]

It would be nice to be able to add a country to the white list.

In my case, 99% of the legit web trafic come from 1 specific country and a very high amount of false positive target that legit trafic.

[ighertesco]

Hello,

Thank you for your request for the new feature!

We are working hard on the issue with many false positive reports, and each month we release a new update with improved algorithm, so the amount of the false positive reports should be decreased.

If we will go deep in your request then lets imagine that we let you add the country to the whitelist. This country generates 99% of the traffic. Thus, 99% of all traffic wont be scanned by Imunify360, and that means that you are using Imunify360 only for 1% of the traffic and this makes no sense.

So tell us please, if the amount of false positive reports decreases, the "add country to white list" feature will not be required?

Also, please note that adding the whole country to the whitelist is a bad practice because anyone can use the IP of the whitelisted country. Such ability creates a big hole in the security of the server and ability of Imunify360 to protect it.

[ighertesco]

Hi.
Agree with Leon.
In many cases is much better to whitelist small or mother country to decrease false positive blocking and valid client requests to support.
We badly need this feature, because it will significantly lower support requests without any real impact on security!

[vmarchuk]

Hello, John.

I am sorry, but so far we have no plans to implement such feature. From our point of view, it is insecure to add the whole country to the whitelist because anyone can use IP of the whitelisted country. Such ability creates a big hole in the security of the server and ability of Imunify360 to protect it.

[vmarchuk]

Hello,
you still not added this feature?

[apb]

Hi,

Please see whitelist country add command in https://docs.imunify360.com/command_...ace/#whitelist
Use this command with caution as it can create a security breach in your system.

[imorandin]

Hi,

Great feature!
Will whitelisting an entire country prevent from showing the SplashScreen when login to cPanel?

Thanks

[imorandin]

I can confirm that adding an entire country to the whitelist does not prevent the splash screen from being shown, which is good.

My question is: does the whitelist behave similarly to CSF’s ignore feature, in the sense that all normal protections and restrictions still apply, but the IP is never fully blocked or blacklisted?

Thanks.

[akots]

Hi imorandin
Yes, the whitelist has a priority over blacklists, so an IP will not be fully blocked. Correspondingly, if the address is added to the whitelist but the corresponding country is blacklisted, the explicitly whitelisted IP address will not be blocked.