IP whitelisted via Server > Security should also whitelist IP for Bot Protection on all apps. I have had to have support reps manually whitelist my client's IP when they were blocked by Bot Protection. I couldn't find their IP to be able to whitelist it. I want to be able to manually and globally whitelist an IP and it would make sense to tie it into the Server > Security whitelist option or if that is not possible, just an easy way to do it via Bot Protection settings.