Allow traffic from search engine bots
This example challenges requests from a list of countries, but allows traffic from search engine bots — such as Googlebot and Bingbot — and from other verified bots.
The rule expression uses the cf.client.bot field to determine if the request originated from a known good bot or crawler.
- Expression: 
(ip.src.country in {"US" "MX"} and not cf.client.bot) - Action: Managed Challenge
 
Was this helpful?
- Resources
 - API
 - New to Cloudflare?
 - Products
 - Sponsorships
 - Open Source
 
- Support
 - Help Center
 - System Status
 - Compliance
 - GDPR
 
- Company
 - cloudflare.com
 - Our team
 - Careers
 
- 2025 Cloudflare, Inc.
 - Privacy Policy
 - Terms of Use
 - Report Security Issues
 - Trademark