Website Security and Backups

Website Security and Backups Help

Set up my Web Application Firewall (WAF) and CDN


  Required: If your dashboard looks different, jump to the new process.

If you purchased Website Security, there are a few steps you'll need to take to activate the Web Application Firewall (WAF) and Content Delivery Network (CDN). The CDN will automatically start working once the WAF is activated.

Notes:
  • Is my WAF/CDN missing features?
  • If your Domain and Website Security plan are in the same GoDaddy account, it only takes a few minutes to complete. Once set up is complete, you won't be able to edit the DNS records for the website associated with the WAF. If you need to edit those records, contact customer support.
  1. Go to your GoDaddy product page.
  2. Next to Website Security and Backups, select Manage All.
  3. For the domain that will use WAF and CDN, below Firewall select Set Up.
    4. Set Up
  4. If your Domain and Website Security plan are in the same GoDaddy account, the set up completes in a few minutes. If your DNS is hosted in a different account, you'll need to do a few additional steps.

Note: If you have difficulty logging in to your website Admin page, you will need to allowlist your home IP address. Follow the instructions in Allow or block website access and use Allow IP Address for your home IP address.

Additional steps for DNS hosted elsewhere

  1. Use the link supplied under Internal Domains to make sure your site loads correctly.
    Internal Domain
  2. Login to the account where your DNS is hosted and configure the A Record so it points to our Website Firewall using the IP address listed under Firewall IP address.
    Firewall dashboard showing host IP address and firewall IP address.
  3. If you have any cName records that point to @, such as: ftp, cpanel, whm, please update them to A records that point directly to the host IP address.
  4. Once your A Record has updated, the Website Security dashboard will update and show that the service has been activated. This can take up to 24 hours to complete.
  5. If you have a firewall on your hosting server like CSF or ModSecurity, we recommend that you allowlist our IP addresses. All connections to your hosting server will pass through our firewall and adding our IPs to your firewall's allowlist will prevent us from being blocked incorrectly. These are the addresses you should allow.
    • 192.88.134.0/23
    • 185.93.228.0/22
    • 2a02:fe80::/29
    • 66.248.200.0/22
    • 208.109.0.0/22

If you need any assistance configuring the firewall, please feel free to request website security help.

  Required: If your dashboard looks different, use this new process.

Set up my WAF and CDN

  1. Go to your GoDaddy product page.
  2. Next to Website Security and Backups, select Manage All.
  3. For the domain you want to setup WAF and CDN, select Continue under Firewall.
    The security dashboard with the Continue link highlighted.
  4. If your Domain and Website Security plan are in the same GoDaddy account, the set up completes in a few minutes.
  5. Once complete, you'll see a Success message.

    6. The firewall setup wizard with a successful message.
  6. If your DNS is hosted in a different account, you'll need to do a few additional steps.

Additional steps for DNS hosted elsewhere

  1. Ensure the correct hosting IP address is added in the settings and Enable or Disable TLS/SSL.

    2. The first step in the firewall setup wizard with a spot to add the host IP address.
  2. Verify domain ownsership by adding the 2 or 4 TXT records specified in the setup wizard. Once those have been added, select I have added the DNS records and then select Verify .

    3. The second step in the firewall setup wizard that provides the two TXT records required for domain ownership verification.
  3. When the TXT records have been verified, you will be provided with the WAF IP address assigned to your site. Please log into the account where the DNS is hosted and configure the A record so it points to the WAF IP address.
  4. Once your A Record has updated, the Website Security dashboard will show that the service has been activated successfully. This can take up to 24 hours to complete.

    5. The last step in the firewall setup wizard that shows the setup was a success.

    If you need any assistance configuring the firewall, please feel free to request website security help.

    Note: If you purchased Website Security Advanced or Premium, the content delivery network (CDN) will be enabled automatically after the IP address change is complete.