Policies

Reading time: About 5 minutes
Prerequisites: None

What Is a Security Policy

A security policy is a complete set of protection configurations for a hostname, covering traffic scrubbing (DDoS), vulnerability protection (WAF), bot detection, API security, access control (Rate Limiting, IP/Geo Firewall, Whitelist, Threat Intelligence), and custom rules. Each module can be independently enabled or disabled.

To access: Go to Security Settings > Policies

Protection Status

Hostname Deployment Status

Core Operations

Enabling / Disabling Security Policies

Single hostname:

1. Expand the hostname row
2. Toggle the switch for each policy
3. Confirm in the confirmation dialog — the change takes effect immediately

Batch operations:

1. Select multiple hostnames
2. Click Modify Policy Switch
3. Set the toggle state for the selected policies (policies not selected remain unchanged)
4. Click OK — the change takes effect immediately

When a policy is disabled, its configuration is retained. Re-enabling it restores the original configuration immediately.

Copying Policies to Other Hostnames

When multiple hostnames require the same configuration, you can avoid configuring each one individually:

1. Find the reference hostname with the desired configuration, and click the Copy Policies icon
2. Select the policy types to copy (multiple selections allowed)
3. Select the target hostnames (multiple selections allowed)
4. Click OK — the corresponding policy configurations of the target hostnames will be overwritten

Important: The copy operation overwrites the existing policy configurations of the target hostname. Before proceeding, verify that the target hostname does not have any special configurations that need to be preserved.

Removing Hostname Protection

When a hostname no longer needs protection from this product:

1. Find the target hostname in the list
2. Click the Remove icon
3. Confirm the removal

After removal, all policy configurations for the hostname are permanently deleted. If you need to re-enable protection later, you must onboard the hostname again and reconfigure all policies.

Recommendation: Before removing a hostname, take a screenshot of its configuration as a backup, or use Copy Policies to back up the configuration to another hostname.

Reactivating Protection After Renewal

When a service order expires, the hostname enters the Not Protected state. After renewal:

1. Find the hostname on the Security Policies page
2. Click Reactivate Protection
3. Select the security policies to enable
4. Click OK

Note: After reactivation, WAF (in auto mode) and DDoS managed rules are automatically updated to the latest version. All other configurations remain as they were before the service was suspended.