Can I block unwanted sessions by IP address or User-Agent or bot?

Any user with Admin permissions can selectively manage and control what sessions are recorded within FullStory. 

To supplement domain blocking, you also have the ability to add filters for client IP addresses and User-Agent substrings.

Simply navigate to Settings > Recording to add targeted exclusions. Exclusions need to be added one at a time (we don't accept comma separated lists). 

Block IPs

Many customers want to omit traffic generated by their employees, who work behind a shared IP address. When you add an IP address to the list, and any client browser with that IP address that visits your site won’t have a FullStory recording generated.

You can wildcard (*) each part of the IP address, where each part is separated by "." (IPv4) or ":" (IPv6). For example, if you wanted to block both and, you could simply supply 192.168.1.*.

In addition to blocking IP address by wildcard, FullStory also supports CIDR IP notations for blocking purposes. 

Block User Agents

Robots and automated crawlers aren’t usually an issue for web applications that exist behind a log in. Many of our customers run FullStory on public facing, content-rich sites, and robots can generate lots of unwanted sessions. 

We’ve added the ability to automatically block a list of common bot user agents, or to manually add User-Agent substrings to prevent these visits from generating sessions. If the string you specify is contained at all in the User-Agent reported by the robot when it visits, we won’t generate a recording.


You can find the user agent string for each session in the playback view. At the top right of the screen, we'll show details under the user's name. Click on the browser and operating system to view the full user-agent string. 

Screen Shot 2020-12-08 at 11.30.11 AM.png

It's important to note that the user-agent details will only be available for a user during a session playback and not available on their main user card, since the details are specific to the session and can change as user's log in from different browsers or machines.

After you've copied the User-Agent details, navigate to Settings > Recording and select "Add blocked UA..." under the Blocked User-Agents section. From here, you can paste your selection to block visits by these robots.

Note: When you turn off recording by IP or UA String, sessions that were already underway will continue to record until completed, so you may notice a few more sessions populate even after you've turned off recording. 

Identifying Unwanted IP Addresses or User Agents

If you're unsure how to identify potentially harmful IP Addresses or User Agents, using a dashboard card to monitor session volume by user dimension is a great way to start. Use this recipe as a guide to creating your own dimensionality card to monitor session volume by IP Address or User Agent.


Need to get in touch with us?

The FullStory Team awaits your every question.

Contact us