Contents
Paid protection add-ons
Free and paid
General settings, CC protection, the basic WAF, bots and scanners, lists and access control, and alerts are free and need no activation. There are two paid add-ons:
| Feature | What it does |
|---|---|
| WAF Plus | Deeper inspection and semantic analysis, trojan and webshell signatures, virus-database scanning, the security posture big screen |
| WAF Rules Update | CRS conversion rules, vulnerability patches, emergency rules and the high-risk IP database synced hourly, without waiting for a release |
The basic WAF gets its rules with version upgrades; with Rules Update they are refreshed hourly.
How to enable
Add-ons come with the license, either included in the plan or enabled separately. For enabling and renewal see Licenses and add-ons.
Where to set them
Go to Security Center › Protection settings › Paid protection. Features that aren't enabled are marked "Add-on, not enabled". Each site can choose a protection scheme for its own type, and schemes can be applied or reset in bulk.
After expiry
When WAF Plus expires it enters a read-only grace period: settings can only be turned off or weakened, not turned on or strengthened, and everything returns after renewal. When Rules Update expires, rules stay at the last version and are no longer updated.