QuestionQ81

VerifiedThreat Hunting and Investigation

Adding any country or region to the allowlist disables which detection?

Explanation

Allowlisting a country or region treats access from that geographic location as expected, so the location-anomaly detection for unusual geolocation is disabled. IP-reputation, blocklist, and concurrent-location detections rely on different signals.

Community Discussion

No comments yet. Be the first to start the discussion!