Yes, the Alert Logic® agent can whitelist traffic. Whitelist policies are configured in the Alert Logic console and implemented at the agent, meaning the agent makes a decision on filtering traffic to not send to the appliance for inspection. Available filters are port, protocol, and CIDR range. We bill and meter on the volume of traffic that is received by the appliance, so whitelisting is a way that customers can reduce their entitlements.
For more information on whitelist policies, see our Whitelist Policies documentation.