Initial setup
FPT Cloud WAF is a SaaS Web Application Firewall operating as a reverse proxy on the FPT Security Platform (FSP). It protects web applications and APIs from OWASP Top 10 attacks, malicious bots, and abnormal traffic.
Prerequisites
Before adding your first domain, complete the following steps.
Step 1: Log in to FPT Portal
Go to https://console.fptcloud.com and sign in with your FPT Cloud credentials. Select the correct Tenant and Project for WAF.
If you don't have an account, visit https://fptcloud.com, click Sign Up, and follow the instructions. The support team will contact you to confirm and create your account.
Step 2: Prepare the following before adding a domain
| Required information | Description | Example |
|---|---|---|
| Domain name | The public domain to protect | shop.abc.com |
| Origin address | Your origin server address (domain or IPv4) | origin.example.com or 203.0.113.1 |
| Protocol | Connection protocol from WAF to Origin | https or http |
| Port | Port to connect WAF to Origin | 443 (HTTPS) or 80 (HTTP) |
| TLS Certificate (PEM) | SSL/TLS certificate from a CA (DigiCert, GlobalSign, etc.) | .pem or .crt file |
| Private Key (PEM) | The private key corresponding to the certificate | .key file |
| DNS access | Permission to create a CNAME record at your DNS provider | — |
| Origin firewall access | Permission to whitelist IPs on your origin server/firewall | — |
note
If you encounter any errors during setup, contact FPT Cloud Support for assistance.
What's next
- Domain management — add your first domain and monitor protection status.
- Security policies — configure IP Rules, Rate Limiting, and WAF/OWASP rules.