Change Layer7 protection globally

Global WAF controls on the selected server. Shown switches are saved settings, not defaults or a protection test. Select the image for full size; use browser Back to return.

1. In cPFence v4+ WAF Management, choose one server and open Settings.
2. Set Layer7 WAF globally, then Save.
3. Confirm the saved value and review legitimate traffic.

For several servers, use the named global Layer7 action in Advanced Tools, checking sidebar targets and every result. Support users need global-protection permission.

As root on the target server:

Action	Command
Enable globally	cpfence --enable-layer7-waf-global
Disable globally	cpfence --disable-layer7-waf-global

Global scope affects every domain

Prefer domain controls for a single-site need. Disabling the global switch removes that automatic protection from all domains on the server, while separate custom lists and bot policy can remain.

Keep the WAF master enabled and review engine/request-type limitations.