---
title: Enable WAF · Cloudflare Learning Paths
description: Once you proxy your DNS records, you should enable rulesets for
  Cloudflare's Web Application Firewall (WAF).
lastUpdated: 2024-08-13T19:56:56.000Z
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/learning-paths/prevent-ddos-attacks/baseline/enable-waf/
  md: https://developers.cloudflare.com/learning-paths/prevent-ddos-attacks/baseline/enable-waf/index.md
---

Once you [proxy your DNS records](https://developers.cloudflare.com/learning-paths/prevent-ddos-attacks/baseline/proxy-dns-records/), you should enable rulesets for Cloudflare's [Web Application Firewall (WAF)](https://developers.cloudflare.com/waf/).

The available rulesets depend on your zone's plan, but all customers have access at least to the Cloudflare Free Managed Ruleset, which provides mitigations against high and wide-impacting vulnerabilities.

For more details and potential customizations, refer to [Managed rulesets](https://developers.cloudflare.com/waf/managed-rules/).
