---
title: Overview
description: "**Flumotion Smart Multi CDN** provides consistent security services at the edge. These services are managed through the **Flumotion Smart Multi CDN console** and include: - **Managed WAF** – Choose between: - [**Flumotion Smart Multi CDN WAF**](https://www.flumotion.com/docs/multiCDN/io-river-waf/) – Pre-configured security rulesets…"
url: "https://www.flumotion.com/docs/multiCDN/overview/"
updated: "2026-10-05"
category: Guides / Security
---

# Overview

**Flumotion Smart Multi CDN** provides consistent security services at the edge. These services are managed through the **Flumotion Smart Multi CDN console** and include:

- **Managed WAF** – Choose between:
  - [**Flumotion Smart Multi CDN WAF**](https://www.flumotion.com/docs/multiCDN/io-river-waf/) – Pre-configured security rulesets that protect against common web threats. It provides out-of-the-box protection against vulnerabilities such as SQL injection, XSS, and known attack patterns, reducing the need for manual rule creation and ongoing maintenance.
  - [**Check Point Machine-Learning WAF**](https://www.flumotion.com/docs/multiCDN/check-point-machine-learning-waf/) – A next-generation, ML-based Web Application and API Protection (WAAP) service that automatically distinguishes between legitimate and malicious traffic. It provides protection against suspicious activity, API abuse, bot traffic, and zero-day attacks with minimal manual tuning.
  - [**Check Point Rule-based WAF**](https://www.flumotion.com/docs/multiCDN/check-point-rule-based-waf/) – A rule-based security engine that identifies and prevents suspicious activity based on predefined rules, providing protection against threats such as the [OWASP Top 10](https://owasp.org/Top10/2025/).
- [**Custom Rules**](https://www.flumotion.com/docs/multiCDN/custom-rules/) – Allow you to define specific conditions and actions to inspect and control incoming web traffic.
- [**Rate Limiting**](https://www.flumotion.com/docs/multiCDN/rate-limiting-security/) – Controls the number of requests a client or IP address can make to your application within a specified time window. It helps protect against abuse, credential stuffing, DDoS attacks, and excessive API calls by automatically throttling or blocking traffic that exceeds the defined limits.
- **Bot Management** – Provides intelligent protection against automated bot traffic, helping ensure that only legitimate human users can access your content and APIs.
  - [**Bot Prevention**](https://www.flumotion.com/docs/multiCDN/bot-prevention/) – Prevents bots from accessing specific pages on your website or performing actions within your web application.
  - [**Bot Visibility**](https://www.flumotion.com/docs/multiCDN/bot-visibility/) – Identifies well-known bots, including *verified bots*, and similar automated traffic accessing your website.

Security services are executed in the following order:

1. **Custom Rules**, including Bot Prevention.
2. **Rate Limiting**.
3. **Machine-Learning WAF**.
4. **Managed WAF** (standard rules).

![](https://www.flumotion.com/wp-content/uploads/security-overview-919x1024.png)

## Enabling Security Services

Security services are disabled by default for new services. You can enable them at the service level through the **Flumotion Smart Multi CDN console**.

Please note that **Flumotion Smart Multi CDN security services use edge compute**, which may incur additional costs from your CDN provider.

To enable security services for your service:

1. Navigate to your service.
2. In the sidebar, select **Security**, then select **WAF**.
3. Click **Enable Edge Security**.

**Note:** Security services must be enabled for your account before they can be enabled for a service. You can contact us at [support@flumotion.com](mailto:support@flumotion.com)  to enable this feature.