In this KB
- What is Website Firewall Component of Sucuri
- How to add website to firewall
- How to specify app server region
- How to make DNS changes
If you followed our previous guide on how to set up the Sucuri Antivirus, your site is now properly monitored by Sucuri for any security issue. Here we will be setting up the Website Firewall (WAF) component of your Sucuri subscription. It is a service sitting in front of your site, filtering all traffic to it and protecting it from hacking attempts and other nasty stuff.
Note: Setting up the Sucuri Website Firewall (WAF) implies changing DNS records for your domain so we advise extreme care when doing it. As always, in the case of doubt, contact our support team.
Step 1: Add a Site to Website Firewall
Navigate to CloudProxy Website Firewall in the left menu of your Sucuri console, type your full domain name in the Domain Name field and click on Add Site.
Step 2: Choose Server Location
From the drop-down menu, choose the location closer to the Cloudways server where the application to protect is hosted (this is the location where the Sucuri servers filtering your traffic will be, so the closer you choose it to your server, less latency will be added).
Step 3: DNS Changes
Now comes the part where you need to be careful. You will be instructed to change the A record for your domain to point to the Sucuri Firewall IP address.
If you followed our advice when initially taking your site live from Cloudways, you created a CNAME record on your DNS provider (typically your domain registrar) pointing to your Cloudways server. Now you will need to add an A record pointing to the Sucuri Firewall IP and remove the CNAME record pointing to Cloudways. If you just have an A record, then you simply need to update the IP.
Before doing anything, read carefully the instructions under Activating CloudProxy and check that your site loads properly from the provided test link.
As said above, get in touch with our support team in case of any issue or doubt!