Enable domain-level WAF protection
A cloud-native gateway integrates with Web Application Firewall (WAF) 3.0 to provide domain-level security protection. When you enable domain-level WAF protection for a domain, WAF inspects all traffic to that domain regardless of which route handles the request. This provides broader coverage than route-level WAF protection, which applies only to a specific route.
Enable domain-level WAF protection for a domain
Log on to the MSE console. In the left-side navigation pane, choose Cloud-native Gateway.
On the Gateways page, click the name of the target gateway.
In the left-side navigation pane of the gateway details page, choose Routes. Click the Domain tab.
Find the target domain. In the WAF Protection column, click Enable Domain-Level WAF Protection.
In the confirmation dialog box, click OK.
After you enable domain-level WAF protection, the WAF Protection column displays Domain-Level WAF Protection Enabled and a link to Go to the WAF console to configure protection rules
Default protections after enablement
After you enable domain-level WAF protection, WAF detects and filters all access traffic to the domain. The following two protection features are enabled by default:
Feature | Protection scope |
Protection rules engine | Common web attacks: SQL injections, cross-site scripting (XSS) attacks, and webshell uploads |
HTTP flood protection | HTTP flood attacks |
All other WAF features are disabled by default. To enable additional protection features or configure custom protection rules, see Overview.
References
Enable route-level WAF protection: Enable WAF protection for a specific route on the gateway.
Enable WAF protection for a cloud-native gateway: Enable WAF protection for an entire gateway.