Enable or disable the WAF

cPFence v4+ manages WAF protection for the supported web server on the target.

Using the WebUI

Global WAF controls on the selected server. Shown switches are saved settings, not defaults or a protection test. Select the image for full size; use browser Back to return.

1. Open WAF Management, choose one server and click Settings.
2. Set cPFence WAF, then Save.
3. Confirm the saved state and check current requests and errors.

For several servers, use the global WAF enable/disable action under Advanced Tools. Check the sidebar targets and each result. Support users need global-protection permission.

Using the CLI

Run as root on the licensed target server:

Action	Command
Enable WAF	cpfence --enable-cpf-waf
Disable WAF	cpfence --disable-cpf-waf

Disabling the master removes WAF protection

Domain switches do not activate protection while the master is off. Applying WAF changes can validate and restart the target web server; read errors before assuming the change succeeded.

See domain settings and engine limits and check WAF protection.