---
schema_version: "1"
id: 8e25d5c7e44cbcdf124c5cde1813ff6b84dfcb1fc6a8a7e11ff38eb923fd1a74
title: Upgrade to eCDN with WAFv2 for Enhanced Security
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/b2c_rn_25_2_upgrade_ecdn_with_wafv2.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.b2c_rn_25_2_upgrade_ecdn_with_wafv2.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: e292e0557774c7356e6240aeb5de038536424658a62c8dd6852dae2f3a678cad
description: Salesforce B2C Commerce now integrates eCDN with WAFv2, offering advanced security features to protect your zones. This update includes OWASP ruleset updates, managed rules, and exposed credentials checks, ensuring better threat detection and reduced false positives.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Upgrade to eCDN with WAFv2 for Enhanced Security

Salesforce B2C Commerce now integrates eCDN with WAFv2, offering advanced security features to protect your zones. This update includes OWASP ruleset updates, managed rules, and exposed credentials checks, ensuring better threat detection and reduced false positives.

**When:** This update is available immediately, with a mandatory migration deadline of June 15, 2025.

**Why:** The update enhances firewall security with advanced rulesets and reduces false positives, improving threat detection accuracy and minimizing disruptions to normal operations. It also helps identify stolen credentials, providing an additional layer of security.

**How:** To migrate existing zones to WAFv2, go to the Business Manager WAF tab, navigate to the WAFv1 zones section, click Start WAFv2 Migration, and follow the prompts. For new zones, configure eCDN WAFv2 settings directly through the Business Manager UI or CDN Zones API. For detailed steps, see [Initate the WAFv2 Migration Process](https://help.salesforce.com/s/articleView?id=cc.b2c_initiate_wafv2_migratinon_process.htm&type=5&language=en_US)

Additional Information

- Salesforce has completed the migration of WAFv1 for development and staging instances to WAFv2 with the default settings in log-only mode for the OWASP WAFv2 Managed Ruleset.
- Salesforce has completed the migration of WAFv1 in zones where WAFv1 is in disabled mode or simulate mode to WAFv2 with the default settings in log-only mode for the OWASP WAFv2 Managed Ruleset.
- The CDN-API will deprecate WAFv1 endpoints on June 15, 2025.
- All remaining zones will be migrated to WAFv2 on June 15, 2025, with the default actions and settings in place for the OWASP WAFv2 Managed Ruleset.
    
    ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-commerce-b2c_commerce_release_notes-264-0-0-production-enus/4ec7e638-d25e-4c65-96ec-ec874bcf5183/images/icon_note.png)
    
    Note If you have already migrated your zones to WAFv2, no action is required. All new zones default to WAFv2 and do not require migration.

#### See Also

- [Initiate the WAFv2 Migration Process](https://help.salesforce.com/s/articleView?id=cc.b2c_initiate_wafv2_migratinon_process.htm&type=5&language=en_US)
- [OWASP WAFv2 Managed Rulesets](https://help.salesforce.com/s/articleView?id=cc.b2c_waf_owasp_wafv2_managed_ruleset.htm&type=5&language=en_US)
- [Migrate to WAFv2 Managed Ruleset](https://help.salesforce.com/s/articleView?id=cc.b2c_wafv2_migrate_to_managed_ruleset.htm&type=5&language=en_US)