I recently developed a dedicated Python-based tool for managing IP whitelist exceptions in F5 BIG-IP Advanced WAF policies.
The goal was simple: make day-to-day exception management faster, cleaner, and less error-prone.
Instead of manually navigating between policies, checking whitelist entries, adding exceptions, deleting old entries, and applying policy changes manually, this tool centralizes the workflow into a focused desktop interface.
Key capabilities include:
Connect directly to F5 BIG-IP Advanced WAF using SSH running REST API commands
Search and select security policies
Add IP or CIDR-based whitelist exceptions
Configure bypass options, including Trusted by Policy Builder, Never Log Requests, Ignore Anomalies, Ignore IP Reputation, and Never Learn Requests
Define block behavior: Policy Default, Never Block, or Always Block
Check all policies for existing IP exceptions
View, select, and delete existing exceptions
Apply policy changes directly from the tool
Track all actions through an activity log
This type of tooling is useful when managing multiple WAF policies across large environments, where small manual mistakes can lead to inconsistent security posture or unnecessary operational overhead.
For me, this is a good example of how automation does not always need to be a full CI/CD pipeline or a large orchestration platform. Sometimes, a focused operational tool that solves a specific daily pain point can bring immediate value to security and network teams.
The Python code can be downloaded from my github account:
https://github.com/amitz89/Advanced-WAF-IP-Exceptions-Manager
#F5 bigip #AdvancedWAF #CyberSecurity automation python #RESTAPI waf #SecurityOperations #DevSecOps