F5 bot defense - false positives

" We have a Bot defense service (ex Volterra I think?) running on our WAF" what you mean exactly by that?

F5 AWAF has it's own bot defense and there is the integration with SaaS bot defense as you said Volterra. You need to clear that as what you speak of is 

F5 Distributed Cloud Bot Defense on BIG-IP 17.1 and then read 

https://docs.cloud.f5.com/docs-v2/bot-defense/quickstarts/bot-defense-quickstart /

https://docs.cloud.f5.com/docs-v2/bot-defense/configure/waap 

as the javascript is injected by F5 and it can be async as well. Play with the options test on a QA/preprod deployment and see.

For the old F5 native bot defense see 

https://my.f5.com/manage/s/article/K42323285