Create a Site Shield map

Request a new map and specify the details of the protected hostnames and other parameters.

📘

A single Site Shield map is typically sufficient for most implementations. If your account already has a Site Shield map, add your properties to an existing map.
If you use SureRoute, after completing this task, you’ll also get a SureRoute map that corresponds to your Site Shield map.

1. Go to ☰ > WEB & DATA CENTER SECURITY > Security Configurations > Site Shield.

2. Click Request new map.

3. In the Map details area, in the Map name field, enter a name for the map.

4. Optional: In the Description field, enter additional details about this Site Shield map.

5. For the User-generated content option, select Yes or No.
   User-generated content (blogs and social networks, for example) has different origin access rates or volumes. If your library may grow larger than five terabytes, select Yes to ensure the appropriate configuration of your properties.

6. In Notification emails, enter up to 15 email addresses to receive notifications about a new list of firewall addresses for this map.

7. In Notification frequency, specify how often you want to get notifications about a new list of firewall addresses for this map.
   The emails are additional reminders. To maintain optimal performance, check for the updates on the status page of the map, and review and accept them as often as you can. Follow the procedure in Update your firewall with the latest IP addresses.

8. Set the expected traffic levels for your map so that the map capacity matches your needs. Provide an estimate of the total peak traffic that all the properties using this Site Shield map could generate.

   a. In Expected Peak Edge, select:

   • The traffic volume in megabits per second that you expect to and from your end users at peak
   • The maximum number of hits per second

   b. In Expected Peak Origin, select:

   • The traffic volume in megabits per second that you expect at your origin at peak
   • The maximum number of hits per second

9. In Origin country/areas, specify the locations of your origin servers. You can select from a predefined list or enter the location’s name.

📘

You can't select more than 5 locations.

10. Optional: If your origin is located in mainland China and your contract includes China CDN, you can select Use China CDN to enhance network performance.
    Make sure all hostnames protected by this map have an Internet Content Provider license and are allow listed in China CDN Manager.

📘

You can’t deselect this option once you save the map.

11. In End-user country/areas, specify the locations from which users access your site.

• Same as origin/country/area
• Global
• Specific Continents. If you select this, enter the specific continents in the End-user continents box.

12. In the Hostnames area, in the Security options, specify if your network uses Enhanced TLS or Standard TLS and/or HTTP only.

📘

You can’t change this option once you save the map.

As selected here, a list of corresponding hostnames appears in the Available properties box.

13. In Available properties, select the checkboxes of all hostnames you want the Site Shield map to protect and click the right arrow (>).
    The selected hostnames move to the Selected properties box and appear in the Selected hostnames table.
14. To remove specific hostnames from Selected properties, select them and click the left arrow (<).
15. Optional: To include custom hostnames in the Site Shield map, in the Selected hostnames area, click Add custom hosts.
    a. In the Custom host row, in the Protected hostnames column’s text field, enter any hostnames you want the Site Shield map to protect, and press Enter after each.
    Entries must be as they appear in your edge server configuration.
    b. To apply Site Shield map’s billing to specific content provider codes, enter the codes in the CP codes field.
    c. In the Origins field, enter the hostnames or IP addresses of your origins.
    d. Optional: To remove an entry, click X next to it.
    e. Optional: To remove all custom hostnames, click Remove custom hosts.
16. Click Submit map request.
    The map status changes to Approve.

What you should see:
In most cases, your map is approved after several hours. If your traffic parameters require the creation of custom configurations to support your needs, map creation can take up to three business days.
Check the status of the map on this page or look at the Notification status of the map on the Site Shield main page.

If your request is approved, it moves to the Activate property stage and you receive an email notification. Your next step is to Add the Site Shield behavior to your properties

If your request is denied, the column displays a Map Denied notification on the Site Shield Management status page. From there, you can either cancel the request by clicking Delete request or edit and resubmit it by clicking Edit request. If you choose to resubmit the request, the approval process begins again.

📘

Contact your service representative for information about the reason for the denial.