Protect CDN resources with Basic WAF

Basic WAF is the firewall that protects you against the most widespread cyberthreats. The feature is available in beta testing and is available for free. The volume of requests per resource that can be safeguarded by the firewall may be subject to limitations.

How to enable Basic WAF

You can activate the firewall for the entire CDN resource or specific URLs.

CDN resource

To enable Basic WAF for an entire CDN resource:

1. Go to the Security section in the Resource settings.
2. Toggle on the Enable Basic WAF feature.
3. Save changes.

Specific URLs

To apply Basic WAF to particular files, in the CDN resource settings (“Rules” tab), create a rule where you specify URLs or regular expressions and enable the Basic WAF feature for them. To do that, consult our dedicated guide.

What to do if Basic WAF blocks some content that should not be blocked?

If Basic WAF blocks content that you want to be allowed, you can set an exception with a rule rather than disabling the feature for the entire resource. To do so:

1. In the CDN resource settings (“Rules” tab), create a rule with the URLs or regular expression of files blocked by Basic WAF.
2. Add the Basic WAF option to the rule by clicking Add option and turn it off.

If you need more flexible settings, use Web Application Security. It’s a paid product that allows you to install WAF, protect it from hacking, install protection against bots and DDoS attacks, and define blacklist and whitelists.