---
title: .Net module install
summary: null
url: >-
  https://www.fastly.com/documentation/guides/next-gen-waf/setup-and-configuration/module-agent-deployment/dotnet
---

## Prerequisites

Before installing the Next-Gen WAF module for .Net, you must have the following installed:

- .NET Framework 4.6.2 or higher.
- Verify you have installed the [Next-Gen WAF agent](https://www.fastly.com/documentation/guides/next-gen-waf/setup-and-configuration/agent-management/installing-the-agent) for Windows. This will ensure the appropriate folder structure is in place on your file system.

## Install

1. Download the latest Next-Gen WAF module for .Net via one of these methods:

   - Directly from [https://dl.security.fastly.com](https://dl.security.fastly.com/sigsci-module-dotnet/sigsci-module-dotnet_latest.zip)
   - Directly from [https://dl.signalsciences.net](https://dl.signalsciences.net/sigsci-module-dotnet/sigsci-module-dotnet_latest.zip)
   - Via [Nuget](https://www.nuget.org/packages/SignalSciences.Module.DotNet/)

2. Extract the contents of `sigsci-module-dotnet-x.x.x.zip` to your application's `bin` directory.

3. Add the following sections to your application's `web.config` file:

   ```xml
   <configuration>
       ...
       <configSections>
           <section name="SignalSciencesModule" type="SignalSciences.ModuleConfiguration"/>
       </configSections>

       ...
       <system.webServer>
           <modules>
               <add name="SignalSciencesModule" type="SignalSciences.HttpModule"/>
           </modules>
       </system.webServer>
       ...

       
       ...
   </configuration>
   ```

4. Restart the web site service.

> **IMPORTANT:** Ensure the `AgentEndPoint` value is set to the same IP and port configured with the Next-Gen WAF agent's `rpc-address` value. See the [Windows agent installation documentation](https://www.fastly.com/documentation/guides/next-gen-waf/setup-and-configuration/agent-management/installing-the-agent) for additional information about Windows agent configuration options.

## .NET module configuration

| Option                    | Default                   | Description                                                                                                                                                                                                              |
| ------------------------- | ------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| `agentEndPoint`           | required, no default      | The TCP endpoint (`host:port`) that the Agent is listening on. `host` can be either a hostname or an IPv4 or IPv6 address.                                                                                               |
| `filterHeaders`           | optional, no default      | Comma-separated list of request and response headers that should not be sent to the Agent. Case insensitive. Regardless of configuration, it always includes `Cookie`, `Set-Cookie`, `Authorization` and `X-Auth-Token`. |
| `agentRpcTimeoutMillis`   | optional, default: 200    | Maximum number of milliseconds allowed for each RPC call to the Agent.                                                                                                                                                   |
| `agentConnectionPoolSize` | optional, default: 10     | Number of connections that, once opened, will be retained in a pool.                                                                                                                                                     |
| `maxPostSize`             | optional, default: 100000 | A request body above this size will not be sent to the Agent.                                                                                                                                                            |
| `anomalySize`             | optional, default: 524288 | If the HTTP response is this size or larger, log it with the Agent.                                                                                                                                                      |
| `anomalyDurationMillis`   | optional, default: 1000   | If the response took longer than this number of milliseconds, log it with the Agent.                                                                                                                                     |

### Sample advanced .NET module configuration

```xml

```

## Related content

- [About module-agent deployment](https://www.fastly.com/documentation/guides/next-gen-waf/setup-and-configuration/module-agent-deployment/about-module-agent-deployment)
- [Using an API with the Next-Gen WAF](https://www.fastly.com/documentation/guides/next-gen-waf/developer/using-an-api-with-the-next-gen-waf)