---
title: "ASN Based IP Whitelisting"
url: "https://docs.indusface.com/en/article/asn-based-ip-whitelisting"
language: "en"
last_updated: "2025-03-03T05:23:16.193Z"
---

# ASN Based IP Whitelisting

### Introduction 

We maintain two databases: the **Honeypot Database** and the **Criminal IP Databas**e, both of which contain collections of malicious IPs. Through the Criminal IP Database, customers have the option to whitelist IPs based on their ASN.  

An Autonomous System Number (ASN) is an identifier associated with a collection of IP addresses. When a customer chooses to whitelist, certain IPs based on their ASN, those IPs are allowed even if they are listed in a criminal IP database. As a result, the associated risk score may be disregarded. This practice helps reduce false positives. 

> Previously, we had made Criminal IP DB the default to all customers, this resulted in False Positives for some customers on Apptrana as Zscalar data center IPs are part of Criminal IP DB. 

> To ensure such FPs do not occur again, we have whitelisted all Zscalar IPs from Criminal IP DB check 

> This is done for all applications on AppTrana : Zscalar ASNs are whitelisted. 

#### How to Whitelist Criminal/Malicious IP 

-   Navigate to **WAAP** \> **List of Rules & Policies** > **BOT Policies** > **Protection Policies** > **IP Reputation**. 
-   Click **Configure**. 

![](https://cdn-assets.productfruits.com/b57ba0a1-ec25-4774-9806-dbf7366d9a08)

-   Enter the ASN name, click **Add +**, and then click **Save**. 

![](https://cdn-assets.productfruits.com/55a99d05-2947-4d64-b2d1-634717705682)

-    Once the ASN is added, IPs that associated with the ASN are whitelisted and ready for criminal DB check.