Website Security and Backups Help

Set up my Web Application Firewall (WAF) and CDN

If you purchased a Website Security, there are a few steps you'll need to take to activate the Web Application Firewall (WAF) and Content Delivery Network (CDN). The Content Delivery Network (CDN) will automatically start working once the WAF is activated.

Note: If your Domain and Website Security plan are in the same GoDaddy account, it only takes a few minutes to complete. Once set up is complete, you won't be able to edit the DNS records for the website associated with the WAF. If you need to edit those records, contact customer support.

  1. Go to your GoDaddy product page.
  2. Next to Website Security and Backups, select Manage All.
  3. For the domain you want to setup WAF and CDN, select Set Up under Firewall.Set Up
  4. If your Domain and Website Security plan are in the same GoDaddy account, the set up completes in a few minutes. If your DNS is hosted in a different account, you'll need to do a few additional steps.

Note: At this time you must allowlist your home IP address (otherwise you may have difficulty logging into your website's Admin page). Follow the instructions in Allow or block website access and use Allow IP Address for your home IP address.

Additional steps for DNS hosted elsewhere

  1. Use the link supplied under Internal Domains to make sure your site loads correctly.
    Internal Domain
  2. Login to the account where your DNS is hosted and configure the A Record so it points to our Website Firewall using the IP address listed under Firewall IP address.
  3. Once your A Record has updated, the Website Security dashboard will update and show that the service has been activated. This can take up to 24 hours to complete.
  4. If you have a firewall on your hosting server like CSF or ModSecurity, we recommend that you allowlist our IP addresses. All connections to your hosting server will pass through our firewall and adding our IPs to your firewall's allowlist will prevent us from being blocked incorrectly. These are the addresses you should allow.
    • 2a02:fe80::/29

Note: If you purchased Website Security Advanced or Premium, the content delivery network (CDN) will be enabled automatically after the IP address change is complete.