Today Bright Cloud can take 12 hours to refresh IP reputation status. I have evidence (support case #01032540) showing that even after 48 hours of an IP address reputation changing from PROXY to BENIGN, F5 cloud still blocks the IP address. This idea is to ensure the data freshness is as near real time as possible compared to Bright Cloud. It should not take more than 1 hour between the moment bright cloud updates an IP address reputation. Suggestion to work with bright cloud and have a delta processing (only update the IP addresses in F5 cloud that have changed since last refresh in bright cloud).
Thank you in advance.
Julien
Other reference:https://my.f5.com/manage/s/article/K000146908