---
title: Anonymizing IP addresses
summary: null
url: >-
  https://www.fastly.com/documentation/guides/next-gen-waf/data-storage-and-privacy/anonymizing-ip-addresses
---

IP Anonymization is a site (also known as workspace) customization that changes the way Next-Gen WAF stores and uses remote client IP addresses. By default IP addresses are not anonymized. When a customer chooses to enable IP Anonymization, agents for a specific site (workspace) will anonymize an IP address before sending it to the cloud. Next-Gen WAF will convert IP addresses into anonymized IPv6 addresses by performing a one-way hash. As a result, Fastly databases will not have knowledge of the actual IP address and it will appear anonymized throughout the control panel.

Actual IP addresses are converted to anonymous IPv6 addresses using [rfc7343](https://tools.ietf.org/html/rfc7343).

The IP address is anonymized in all headers and data fields with the anonymized IPv6 address. In addition, the actual IP address is truncated by setting the last octet of an IPv4 IP address and the last 80 bits of an IPv6 address to zeros and stored as metadata on the record.

## Limitations and considerations

The following features will not work when IP Anonymization is enabled:

- DNS lookups
- CIDR support in the search control panel
- Network Data Insights (partial functionality)

## Enabling IP anonymization

To enable IP anonymization, complete the following steps:

### Next Gen Waf Control Panel

1.   Log in to the [Next-Gen WAF control panel](https://dashboard.signalsciences.net).

2.   From the **Sites** menu, select a site if you have more than one site.

3. From the **Manage** menu, select **Site Settings**.
4. Click **Agent Configurations**.
5. Under **IP Anonymization**, select **Enabled**. A warning appears stating some functionality will not work with IP Anonymization enabled.
6. Click **I understand** and then click **Update**.

### Fastly Control Panel

1.   Log in to the [Fastly control panel](https://manage.fastly.com).

2.   Go to **Security** > **Next-Gen WAF** > [**Workspaces**](https://manage.fastly.com/security/ngwaf/workspaces).

3.   Click the gear <span class="inline-icons"><img src="/img/icons/gear.png" alt="Gear icon" /></span> next to the workspace that you want to modify.

4. Click **IP anonymization** and then **Enabled**.
5. Click **Update**.

## Disabling IP anonymization

To disable IP anonymization, complete the following steps:

### Next Gen Waf Control Panel

1.   Log in to the [Next-Gen WAF control panel](https://dashboard.signalsciences.net).

2.   From the **Sites** menu, select a site if you have more than one site.

3. From the **Manage** menu, select **Site Settings**.
4. Click **Agent Configurations**.
5. Under **IP Anonymization**, select **Disabled**.
6. Click **Update**.

### Fastly Control Panel

1.   Log in to the [Fastly control panel](https://manage.fastly.com).

2.   Go to **Security** > **Next-Gen WAF** > [**Workspaces**](https://manage.fastly.com/security/ngwaf/workspaces).

3.   Click the gear <span class="inline-icons"><img src="/img/icons/gear.png" alt="Gear icon" /></span> next to the workspace that you want to modify.

4. Click **IP anonymization** and then **Disabled**.
5. Click **Update**.

## Related content

- [Using an API with the Next-Gen WAF](https://www.fastly.com/documentation/guides/next-gen-waf/developer/using-an-api-with-the-next-gen-waf)