How to configure Edge Firewall main settings

Once you create an edge firewall with Azion, you can modify a few configurations. In this guide, you’ll learn to modify the domains associated with your firewall and to enable the available modules.

In this section, you’ll modify the main settings of your edge firewalls: name, domains, and modules via Azion Console.

Access Azion Console > select Edge Firewall.
From the list, select the edge firewall you want to edit or click + Edge Firewall to create a new one.
Give your edge firewall a unique and easy-to-remember name.

If you want to protect your domain with an edge firewall, check the guide below.

Go to How to protect your domain

Modules

Modules can unlock additional functionalities and features related to your configured firewalls. See the Pricing page for more details.

There are four available modules that can be activated with your edge firewall:

Protects your content and applications against Distributed Denial of Service (DDoS) attacks. Automatically enabled in all accounts.
Enables you to run serverless functions on Azion’s edge with low latency, bringing the operational power closer to the end user.
Allows the creation of filters by IP/CIDR, ASN addresses, or by countries (geolocation) through the configuration of Network Lists and the definition of business rules that will validate blocking or releasing Criteria.
Protects your applications against threats such as SQL Injections, Remote File Inclusion (RFI), Cross-Site Scripting (XSS), and many others.

You can choose between the list of modules: you can select one, a few, or even all.

Debug rules

You’ll also find a switch labeled Debug Rules. If you enable the switch, you’ll turn on the feature that allows you to check if the rules you’ve created using Rules Engine for Edge Firewall have been successfully executed in your application.

Go to How to debug rules guide

Status

You’ll also find a switch labeled Active. You can enable the switch to activate your edge firewall, and disable the switch if you no longer want this edge firewall active.

Once you’re done configuring your main settings, click the Save button.

Run the following GET request in your terminal, replacing [TOKEN VALUE] with your personal token to retrieve your <edge_firewall_id>:

curl --request GET --url https://api.azion.com/v4/edge_firewall/firewalls --header 'Accept: application/json' --header 'Authorization: Token [TOKEN VALUE]'

You’ll receive a response with all your existing edge firewalls. Copy the value of the <id> that you want to configure.
Run a PATCH request to modify the firewall as follows:

curl --request PATCH --url https://api.azion.com/v4/edge_firewall/firewalls/<edge_firewall_id> --header 'Accept: application/json' --header 'Authorization: Token [TOKEN VALUE]' --header 'Content-Type: application/json' --data '{
  "name": "My edge firewall",
  "modules": {
    "edge_functions": { "enabled": true },
    "network_protection": { "enabled": true },
    "waf": { "enabled": true }
  },
  "debug": true,
  "active": true
}'

Key	Description
`name`	Name of the edge firewall
`is_active`	Boolean value that enables (`true`) or disables (`false`) the edge firewall
`edge_functions_enabled`	Boolean value that enables (`true`) or disables (`false`) the Edge Functions module
`network_protection_enabled`	Boolean value that enables (`true`) or disables (`false`) the Network Layer Protection module
`waf_enabled`	Boolean value that enables (`true`) or disables (`false`) the Web Application Firewall (WAF) module
`debug_rules`	Boolean value that enables (`true`) or disables (`false`) the Debug Rules feature

Wait a few minutes for the changes to propagate and your edge firewall will be updated.