domains / families / security / manage-firewall

manage-firewall

separate

Inspects and configures the web application firewall (WAF) in front of a Power Pages production site. Lists the current state, recommends enabling protection when it is off, and walks the user through adding, updating, or removing custom rules — IP blocks, country blocks, path blocks, and rate limits. Use when the user wants to turn on WAF, block traffic by IP or country, rate-limit login or signup pages, protect pages from brute-force attempts, restrict access to specific paths, review the current firewall configuration, or asks "is my site protected against bots / common web attacks?" — even if they say "add rate limit" or "protect login page" without mentioning "firewall" or "WAF".

When to use

• turn on WAF
• block traffic by IP or country
• rate-limit login or signup pages
• protect pages from brute-force attempts
• restrict access to specific paths
• review the current firewall configuration
• add, update, or remove custom rules

When not to use

• non-production sites
• unsupported regions
• resolving sites by name or URL

Skill page

Source