Managing workspaces (sites)

1. Log in to the Fastly control panel.
2. Go to Security > Next-Gen WAF > Workspaces.
3. Click Add Workspace.
4. In the Name field, enter a friendly name for the new workspace.
5. In the Description field, enter a description of the workspace.
6. Click Add Workspace.

1. Log in to the Next-Gen WAF control panel.
2. From the corp navigation bar, click the Corp Manage menu and then select Sites.
3. Click Add site.
4. In the Display name field, enter a friendly name for the new site. The display name determines how the site is listed on the Site Overview page and the site selector menu.
5. In the Short name field, enter a short name for the new site. The short name is used in URLs and the API (e.g., https://dashboard.signalsciences.net/corps/SHORT-NAME/).

1. Log in to the Fastly control panel.
2. Go to Security > Next-Gen WAF > Workspaces.
3. Click the gear next to the workspace that you want to modify.
4. Update the settings located on the following tabs as needed:
   • On the General tab, update the Name and Description fields, then click Update.
   • On the Protection mode tab, update the protection mode, then click Update.
   • On the Attack thresholds tab, adjust the attack thresholds, then click Update.
   • On the Virtual patches tab, enable and disable CVE virtual patch signals.
   • On the IP anonymization tab, select Disabled to avoid anonymizing IP addresses or select Enabled to convert IP addresses into anonymized IPv6 addresses. Then click Update.
   • On the Redactions tab, manage your custom redactions.
   • On the Custom response codes tab, enter a default blocking response code. All blocking actions will return the default blocking response code unless a different response code is specified in a rule. Supported response codes are 301, 302, and 400-599.
   • On the Client IP headers tab, add or delete client IP headers.
   • On the Alerts tab, manage your alerts, which notify you when select Next-Gen WAF activity occurs.
   • On the Header Links tab, manage your header links, to cross-reference Next-Gen WAF data with your own internal systems.

1. Log in to the Next-Gen WAF control panel.
2. From the corp navigation bar, click the Corp Manage menu and then select Sites.
3. Click the name of the site that you want edit.
4. Fill out the fields on the Name form as follows:
   • In the Display name field, enter a friendly name for the site. The display name determines how the site is listed on the Site Overview page and the site select selector menu.
   • In the Short name field, enter a short name for the site. The short name is used in URLs and the API.
5. Click Update.
6. Click the Agent Configurations tab.
7. Fill out the Agent Configurations form as follows:
   • From the Agent mode menu, select the agent mode for the site.
   • From the IP anonymization menu, select Disabled to not anonymize IP addresses or select Enabled to convert IP addresses into anonymized IPv6 addresses.
   • In the Client IP headers area, add a header by clicking Add header and then entering the name of the header in the Header field. Remove a header by clicking Delete header to the right of a header name.
   • In the Blocking response code field, enter a default blocking response code for the site. All blocking actions will return the site default blocking response code unless a different response code is specified in a rule. Supported response codes are 301, 302, and 400-599.
   • (Optional) If you entered 301 or 302 in the Blocking response code field then, in the Redirect URL field, enter the absolute or relative URL of the redirect location. See Using redirect custom response codes.
8. Click Update.
9. Click the Users tab.
10. Manage the users assigned to the site.

Workspace summary table

The Account overview dashboard gives you access to the Workspace summary table. The Workspace summary table highlights the most frequent attack types and attack sources (e.g., the regions where the attacks originated) for each workspace.

To access the Workspace summary table:

1. Log in to the Fastly control panel.
2. Go to Security > Next-Gen WAF > Dashboards.
3. From the workspaces bar, click the menu to the right of the workspace name and select your account name.

The Workspace summary table contains these columns:

• Workspace: the name of the workspace.
• Requests w/ attack signals: the top number represents the number of requests that were blocked due to threshold configurations. The bottom number represents the number of requests that have at least one attack signal.
• Attack signals: a list of the attack signals that made up the most attacks to the workspace and their corresponding percentage of the total.
• Countries: the top three regions where the attacks originated and their corresponding percentage of the total.
• Flagged IPs: the number of IP addresses that were flagged due to exceeding set thresholds in the specified time period.

Site Summaries table

Click the name of your corp in the upper left corner of the control panel to navigate to the Corp Overview page. The Site Summaries table on the Corp Overview page highlights the most frequent attack types and attack sources (e.g., the regions where the attacks originated) for each site. You can use a search bar to filter the table by site and the site menu to view all sites, sites with attack requests, or sites without attack requests. The table contains these columns:

• Site: the name of the site and the total number of requests the site has received.
• Requests with Attack Signals: the top number represents the number of requests that were blocked due to threshold configurations. The bottom number represents the number of requests that have at least one attack signal.
• Attack Signals: the most frequent attack types for that site.
• Countries: the top three regions where the attacks originated.
• Flagged IPs: the number of IP addresses that were flagged due to exceeding set thresholds in the specified time period.

1. Log in to the Fastly control panel.
2. Go to Security > Next-Gen WAF > Workspaces.
3. Click the gear next to the workspace that you want to delete.
4. Click Delete workspace.
5. Enter the name of the workspace as a means of verifying that you want to permanently delete the workspace, then click Delete.

1. Log in to the Next-Gen WAF control panel.
2. From the corp navigation bar, click the Corp Manage menu and then select Sites.
3. Click the name of the site that you want to delete.
4. Click Delete site.
5. Review the warnings associated with deleting a site and select I understand the consequences of deleting a site.
6. Click Delete.