Salesforce B2C Commerce now integrates eCDN with WAFv2, offering advanced security features to protect your zones. This update includes OWASP ruleset updates, managed rules, and exposed credentials checks, ensuring better threat detection and reduced false positives.
When: This update is available immediately, with a mandatory migration deadline of June 15, 2025.
Why: The update enhances firewall security with advanced rulesets and reduces false positives, improving threat detection accuracy and minimizing disruptions to normal operations. It also helps identify stolen credentials, providing an additional layer of security.
How: To migrate existing zones to WAFv2, go to the Business Manager WAF tab, navigate to the WAFv1 zones section, click Start WAFv2 Migration, and follow the prompts. For new zones, configure eCDN WAFv2 settings directly through the Business Manager UI or CDN Zones API. For detailed steps, see Initate the WAFv2 Migration Process
Additional Information
- Salesforce has completed the migration of WAFv1 for development and staging instances to WAFv2 with the default settings in log-only mode for the OWASP WAFv2 Managed Ruleset.
- Salesforce has completed the migration of WAFv1 in zones where WAFv1 is in disabled mode or simulate mode to WAFv2 with the default settings in log-only mode for the OWASP WAFv2 Managed Ruleset.
- The CDN-API will deprecate WAFv1 endpoints on June 15, 2025.
- All remaining zones will be migrated to WAFv2 on June 15, 2025, with the default actions and settings in place
for the OWASP WAFv2 Managed Ruleset.
Note If you have already migrated your zones to WAFv2, no action is required. All new zones default to WAFv2 and do not require migration.