Must be a list including only your country and the countries of your collaborators having access to your application back-office. The Firewall will automatically add your country to this list, and thus will automatically deny all attempts to access your website back-office to the rest of the world.
Never ever authorise any search engine or crawler or any bot of any type, or route your back-office through a CDN. The unique person that must have access to your back-office is you and your collaborators.
We understand that for financial reasons and security knowledge most of websites owner are in shared hosting environment; this is a breach, beyond our scope.