Denylist or allowlist an application pool

Denylists and allowlists are based on the application pool name. Application pool denylists and allowlists also accept * as a variable-length wildcard. (AppPool* will match AppPool1, AppPool_arb, etc.)

Allowlists take precedence over denylists. App pool filtering is evaluated before application filtering. If an app pool is filtered out, the agent will never even get to the application filtering stage.

To disable the agent for a specific application, populate agent.dotnet.app_pool_denylist with the appropriate application pool in C:\ProgramData\Contrast\dotnet\contrast_security.yaml:

# Comma-separated list of application pools ignored by Contrast
agent:
  dotnet:
    app_pool_denylist: ExampleAppPoolName

To only enable the agent for specific applications hosted by IIS, configure agent.dotnet.app_pool_allowlist to only analyze certain application pools. If an application pool is allowlisted, the agent analyzes the matching pools. There should be no performance impact for any other applications.

To enable the agent for only specific application pools, populate agent.dotnet.app_pool_allowlist with the appropriate application pool in C:\ProgramData\Contrast\dotnet\contrast_security.yaml:

# Comma-separated list of application pools exclusively profiled by Contrast
agent:
  dotnet:
    app_pool_allowlist: ExampleAppPoolName