Blocklist or allowlist an application pool

Blocklists and allowlists are based on the application pool name. Application pool blocklists and allowlists also accept * as a variable-length wildcard. (AppPool* will match AppPool1, AppPool_arb, etc.)

Blocklists take precedence over allowlists. Application pools that satisfy both lists won't be analyzed.

To disable the agent for a specific application, populate agent.dotnet.app_pool_denylist with the appropriate application pool in C:\ProgramData\Contrast\dotnet\contrast_security.yaml:

# Comma-separated list of application pools ignored by Contrast
agent:
  dotnet:
    app_pool_denylist: ExampleAppPoolName

To only enable the agent for specific applications hosted by IIS, configure agent.dotnet.app_pool_allowlist to only analyze certain application pools. If an application pool is allowlisted, the agent analyzes the matching pools. There should be no performance impact for any other applications.

To enable the agent for only specific application pools, populate agent.dotnet.app_pool_allowlist with the appropriate application pool in C:\ProgramData\Contrast\dotnet\contrast_security.yaml:

# Comma-separated list of application pools exclusively profiled by Contrast
agent:
  dotnet:
    app_pool_allowlist: ExampleAppPoolName

Tip

See yaml-based configuration for more details about standard configuration.