Permit source subnet to bypass web protection profile

Hello,

A customer wants to run vulnerability tests directly to a web server, which is currently protected by a FWB. So far all tests are blocked by the FWB, but the customer wants these tests to bypass the scanning from the FWB web protection profile and hit the server directly, so that they will check if the server is properly patched.

So, my question is simple: Is it possible to create an exception based in the source IP address subnet for the entire web protection profile and how?

Thanks