Salesforce B2C Commerce now uses eCDN with WAFv2. WAFv2 brings advanced security features to safeguard all your zones, both existing and new. You can migrate your existing customer zones from WAFv1 to WAFv2 as a self-service option. You can configure eCDN WAFv2 settings directly through the Business Manager UI or CDN Zones API for new zones. In addition, eCDN with WAFv2 integrates ruleset enhancements that improve firewall security and reduce false positives, improving threat detection accuracy and minimizing disruptions to normal operations.
When: All zones must be migrated from WAFv1 to WAFv2 by June 15, 2025.
Why: WAFv2 includes these ruleset enhancements.
- OWASP ruleset: The Salesforce eCDN OWASP Core Ruleset is our implementation of the OWASP ModSecurity Core Rule Set (CRS). It’s updated regularly based on the latest version from the official OWASP code repository.
- eCDN managed rules: The Salesforce security team continually updates the ruleset to address new vulnerabilities and reduce false positives.
- eCDN exposed credentials check: Helps to identify stolen credentials by performing a lookup against a public database of compromised credentials.
How: To migrate your existing zones to WAFv2, on the Business Manager WAF tab, go to the Business Manager UI and WAFv1 zones section. Click Start WAFv2 Migration, and follow the prompts.