How to configure Firewall main settings

Customize your firewall domains and modules.

Once you create an firewall with Azion, you can modify a few configurations. In this guide, you’ll learn to modify the domains associated with your firewall and to enable the available modules.

In this section, you’ll modify the main settings of your firewalls: name, domains, and modules via Azion Console.

Access Azion Console > select Firewall.
From the list, select the firewall you want to edit or click + Firewall to create a new one.
Give your firewall a unique and easy-to-remember name.

If you want to protect your domain with an firewall, check the guide below.

go to How to protect your domain

Modules

Modules can unlock additional functionalities and features related to your configured firewalls. See the Pricing page for more details.

There are four available modules that can be activated with your firewall:

DDoS Protection Protects your content and applications against Distributed Denial of Service (DDoS) attacks. Automatically enabled in all accounts.
Functions Enables you to run serverless functions on Azion’s edge with low latency, bringing the operational power closer to the end user.
Network Shield Allows the creation of filters by IP/CIDR, ASN addresses, or by countries (geolocation) through the configuration of Network Lists and the definition of business rules that will validate blocking or releasing Criteria.
Web Application Firewall Protects your applications against threats such as SQL Injections, Remote File Inclusion (RFI), Cross-Site Scripting (XSS), and many others.

You can choose between the list of modules: you can select one, a few, or even all.

Debug rules

You’ll also find a switch labeled Debug Rules. If you enable the switch, you’ll turn on the feature that allows you to check if the rules you’ve created using Rules Engine for Firewall have been successfully executed in your application.

go to How to debug rules guide

Status

You’ll also find a switch labeled Active. You can enable the switch to activate your firewall, and disable the switch if you no longer want this firewall active.

Once you’re done configuring your main settings, click the Save button.

To configure an firewall to protect an specific domain, go to the Protect your domain guide

Run the following GET request in your terminal, replacing [TOKEN VALUE] with your personal token to retrieve your <edge_firewall_id>:

curl --request GET --url https://api.azion.com/v4/edge_firewall/firewalls --header 'Accept: application/json' --header 'Authorization: Token [TOKEN VALUE]'

You’ll receive a response with all your existing firewalls. Copy the value of the <id> that you want to configure.
Run a PATCH request to modify the firewall as follows:

curl --request PATCH --url https://api.azion.com/v4/edge_firewall/firewalls/<edge_firewall_id> --header 'Accept: application/json' --header 'Authorization: Token [TOKEN VALUE]' --header 'Content-Type: application/json' --data {

"name": "My firewall",

"modules": {

"edge_functions": { "enabled": true },

"network_protection": { "enabled": true },

"waf": { "enabled": true }

},

"debug": true,

"active": true

}

Key	Description
`name`	Name of the firewall
`is_active`	Boolean value that enables (`true`) or disables (`false`) the firewall
`edge_functions_enabled`	Boolean value that enables (`true`) or disables (`false`) the Functions module
`network_protection_enabled`	Boolean value that enables (`true`) or disables (`false`) the Network Shield module
`waf_enabled`	Boolean value that enables (`true`) or disables (`false`) the Web Application Firewall (WAF) module
`debug_rules`	Boolean value that enables (`true`) or disables (`false`) the Debug Rules feature

Wait a few minutes for the changes to propagate and your firewall will be updated.

Check the Azion API documentation to know more about what the Azion API can offer.