Which functionality cannot be configured via a Network Security Policy?

Avi Network Security Policies are evaluated at the network-security layer and can be used for actions such as allowing, dropping, denying, rate limiting, and applying rules based on client characteristics such as IP reputation or geolocation. Blocking selected countries is supported through geolocation-based matching, and IP reputation is also a supported security capability in Avi. Rate limiting is a valid Network Security Policy action. Botnet Detection , however, is not configured through a Network Security Policy. Bot detection and bot management are part of Avi’s WAF and bot-management security features, associated with application-layer HTTP security rather than the network security policy object. Therefore, the function that cannot be configured through a Network Security Policy is Botnet Detection.