Whitelist a URI in dotDefender

This article will go over whitelisting a URI in dotDefender. For example if you want the admin portion of your site whitelisted to prevent false positives with dotDefender, you would want to follow the steps below rather than adding an IP address to the whitelist rule for each IP accessing the admin section of the site.

To add a Whitelist rule to allow requests from a specific URI:

1. Open the dotDefender Administration Console.
2. Expand the required Profile (This will usually be the same site name as IIS).
3. Expand Patterns > Whitelist
4. Select User Defined.



5. In the right pane, click Add New Rule and give the rule a name.





6. In the Rule Type window, select Search in custom fields of HTTP requests and click Next.



7. From the Standard HTTP request fields drop-down select REQUEST_URI and click Next.
8. Enter the URI pattern to search. (http://HOST/URI)

For example: if you were whitelisting http://www.domain.com/wp-admin/ you would simply use "/wp-admin" as the search pattern.

9. Select the appropriate action (block/allow) and click Next.
10. Choose to apply this to all pages or a specific URI and click Next then Finish.
11. Click the GREEN arrow on the top menu for the settings to take effect.