Applying and Rolling Back Protections

What Guided Response does

Every alert that maps to a "block this traffic" situation carries a suggested rule: the exact eCDN expression, the recommended action, and the reasoning behind it. That is the advisory half, and you can always copy it and apply it in Business Manager yourself. This article covers the enforce half: turning that suggestion into a live protection on your storefront in one click, and rolling it back just as fast.

The invariant, first. Edge never changes your WAF automatically. Nothing goes live until a person clicks Apply and confirms. Every rule Edge generates arrives disabled, is named so you can find it later, and can be removed in one click.

You can also draft a rule on demand, without waiting for an alert: the Suggest rule button on any network's detail page produces the same card with the same copy-paste expression. One-click apply stays tied to an open alert.

Each suggested rule carries a short plain-English note on what it will and will not affect — which traffic gets challenged and who is untouched — so you know the blast radius before you click (Plain-English Summaries).

Before you can apply: connect your eCDN

One-click apply talks to your Salesforce Commerce Cloud eCDN (the CDN Zones API that sits behind Business Manager). To turn it on:

1. Open Settings in Edge and find eCDN connection.
2. Enter the CDN Zones API credentials for the zone that fronts your storefront.
3. Save. Edge stores the credentials encrypted and scoped to your account.

Until an eCDN connection exists, the Apply button is replaced with a "Connect your eCDN" link. The copy-paste rule and the Business Manager click-path are always available whether or not you connect, so the advisory half never depends on credentials.

Who can apply

Applying and rolling back are limited to owners on a Growth plan or higher. Pushing a live WAF rule is a high-trust action, so the one-click path is deliberately gated.

• If you are not an owner, you see the suggested rule but not the Apply button.
• If you are an owner on a lower plan, you see an upgrade prompt in place of Apply.

Everyone on the team can still read the suggestion and apply it manually in Business Manager. The gating only affects the one-click path, never your ability to see the rule.

Applying a rule

From an alert, or from the shared-target card on an incident:

1. Read the Stop this now card. It shows the rule expression, the action (usually a Managed Challenge, so real shoppers pass and automation fails), and the caveats you should read first.
2. Click Apply on my eCDN.
3. Confirm. Edge recomputes the rule on the server from the alert itself (the button only sends the alert id, never a rule body you could tamper with), pushes it live, and records it in an audit ledger.

The rule goes live against exactly the traffic the alert identified. A challenge-first rule costs a false positive one extra challenge, not a lost sale. Where a challenge would be pointless (the source already solves challenges) the suggestion recommends a block instead, and tells you to confirm the network is not a partner first.

Rolling back

Every applied rule shows a Roll back control (owner plus Growth). One click removes the rule from your eCDN and marks it rolled back in the ledger. There is no waiting period and no half-applied state: the rule is either live or gone.

Stale protections

eCDN rules do not expire on their own. When the alert that justified a rule resolves but the rule is still live, Edge marks it stale on the Protections page and sends a one-time reminder to your alert channels so you can stand it down. Edge never removes the rule for you; standing it down is always your call.

The Protections page is the one place to review this. It lists every rule Edge currently has live, which alert each one is tied to, and whether it has gone stale, so cleaning up is a scan and a click rather than a hunt.

What Edge will and will not do

• It will: generate the exact rule, apply it on your click, record every apply and rollback in an immutable ledger, flag stale rules, and remind you about them.
• It will not: apply, change, or remove any rule without a person clicking in the Edge UI. There is no automatic enforcement anywhere in the product.

If you would rather never use one-click apply, you never have to. The copy-paste expression and the Business Manager steps do the same job by hand, and the safety model is identical: nothing changes until you enable it.