WebOrion™ / Frequently Asked Questions

FAQs

Still got more questions? Contact us.

General

How does WebOrion™ Business work?

WebOrion™ Business is an all-in-one web security and performance suite for small businesses and large enterprises alike. By simply making a change to your domain’s DNS settings (usually through your hosting provider) to point your domain to WebOrion™’s globally distributed network, you will be able to enjoy all of WebOrion™’s security and performance-enhancing features.

The Protector will stop attackers in their tracks, blocking all web application vulnerabilities to keep you covered. The Accelerator will optimise the performance of your website by serving content faster to your visitors from all points on the globe. The Monitor will ensure that your website remains up and free from unauthorised changes to give you a greater peace of mind. These parts work together to greatly enhance both you and your visitors’ experience on your website, so that you can focus on your actual business instead.

What are the requirements for my website to use WebOrion™?

Our only requirement is that you have a domain name, as you will have to change your domain DNS settings to point to the WebOrion™ network so that you can enjoy all the benefits of WebOrion™ Business.

WebOrion™ is designed to work with almost all websites and web platforms, and no software or hardware installation is required on your server.

How can I configure my domain to point to the WebOrion™ network?

You will need to point your domain name to the WebOrion™ network, which will be given in the form of a CNAME. This means that you will have to remove or modify the existing A/CNAME record for your domain, and replace it with the given address.

For more information, check out the Knowledge Base article on this issue.

Will WebOrion™ work with my SSL certificate?

Yes. Simply go to CDN & Web Server Settings > SSL Settings, and upload your SSL certificate there. Alternatively, if you choose to use the WebOrion™-managed SSL certificate, you will be provisioned a free LetsEncrypt SSL certificate.

Note that the WebOrion™ Protector web application firewall (WAF) will require your SSL certificate and private key in order for the WAF to inspect HTTP request traffic for malicious content.

Pricing and Billing

Why do I need to provide my credit card for a free trial?

In order to fully utilise your WebOrion™ free trial, we require you to point your website to our WebOrion™ network through your DNS settings. If you do not revert to your original DNS settings before your free trial ends, your WebOrion™ account will expire, causing your website to be inaccessible.

To prevent your site from facing downtime, we will collect your credit card details during signup, which will automatically be billed on a pro-rated monthly basis once your subscription period is up.

To terminate your trial any time, simply go to your account settings, and click “Cancel Subscription” under the “Domain Subscriptions” subpage.

Will I be charged during my free trial?

We will not make any charges to your credit card during your free trial period. You may terminate your free trial any time before the period is up, under your Account Settings.

If your subscription is still active once the trial period is up, you will be charged a pro-rated bill immediately for the duration for the rest of the month to your credit card.

How can I terminate my free trial?

You can cancel your free trial any time before the free trial period is up, by going to your Account Settings, and clicking “Cancel Subscription” under the “Domain Subscription” subpage.

What happens after my free trial period is over?

If your subscription is still active once the trial period is up, you will be charged a pro-rated bill immediately for the duration for the rest of the month to your credit card.

Can I change my plan?

Sure you may. You can upgrade your plan any time during the current monthly subscription.

If you upgrade your plan halfway through a monthly subscription, you will be immediately charged the pro-rated difference in prices between the old and new plans.

If you downgrade your plan halfway through a monthly subscription, the unused amount that was previously billed at the start of the month will automatically be rolled over to subsequent months as billing credits. These billing credits will offset your subsequent monthly bills. You will only be billed for the new plan once these billing credits are used up.

When does my credit card get charged?

Monthly bills for WebOrion™ Business are charged to your credit card saved in your account on the 1st of each month.

When your free trial period is up, a pro-rated bill will immediately be charged for the remaining duration of the month. All subsequent bills will be charged on the 1st of each month.

How can I cancel my subscription?

You can cancel your free trial any time before the free trial period is up, by going to your Account Settings, and clicking “Cancel Subscription” under the “Domain Subscription” subpage.

Trial customers:

If you do not wish to continue your WebOrion™ subscription after your free trial period, you may cancel your subscription any time before the trial period is up, and no charges will be made to your credit card. All services will be automatically disabled once the free trial period is up.

Paying customers:

For current paying customers who wish to cancel the subscription, since the charges have been made for the month, we will not be able to refund you for the remaining days in the month. All WebOrion™ services will be disabled at the start of the following month.

Please ensure that your domain’s CNAME record is reverted back to the original settings, or otherwise your visitors may face interruptions to your site once your WebOrion™ subscription is disabled.

WebOrion™ Protector

How does the WebOrion™ Protector help to protect my website?

The WebOrion™ Protector comprises of a web application firewall (WAF), which sits in between your website’s visitors and your website. It will silently inspect all traffic that goes through it, and filters out any requests that are deemed to be suspicious.

The WebOrion™ Protector will help to prevent the OWASP Top Ten threats, including SQL injections, cross-site scripting, local/remote file inclusions, arbitrary code execution and more. Additionally, WebOrion™ comes with several WAF rule sets that will protect known vulnerabilities in specific platforms, including WordPress, Joomla!, Drupal and more.

I am currently using another WAF service for my website. Can I still use the WebOrion™ Protector?

Yes. Although we do not recommend using two WAFs at the same time, WebOrion™ will continue to work if it is placed in front or behind of another WAF service.

Will there be any downtime while switching web traffic over to WebOrion™?

Not at all. As soon as you receive the CNAME record value during the setup process, the WebOrion™ Protector would have been completely set up for your domain, and your website will continue to receive uninterrupted traffic when it goes through the WebOrion™ network.

Note that DNS record updates are not immediate, as the Time-To-Live (TTL) value determines the duration of time before the old records expire. This means that your DNS settings may take up to 48 hours to complete propagate throughout the world.

Will the WebOrion™ Protector make my website slower?

No. Our WebOrion™ WAF nodes are designed to scale to handle any amount of incoming traffic, and there will not be a bottleneck.

In fact, the WebOrion™ Accelerator content delivery network (CDN) will speed up your website alongside the WebOrion™ Protector. Since we have edge servers located all around the world, when a visitor visits your website he or she will be served the content from the nearest edge server, which dramatically reduces page load times regardless of where you view your website around the world.

What is WAF Operating Mode?

The “WAF Operating Mode setting determines whether the WebOrion™ Protector will block any requests that is deemed as suspicious.

When the WAF is on Passthrough Mode, no requests will be blocked, but only suspicious requests will be logged in the Firewall Event Log.

When the WAF is on Blocking Mode, any requests that are deemed as suspicious will be blocked and also logged.

WebOrion™ Accelerator

How does the WebOrion™ Accelerator help to speed up my website?

The WebOrion™ Accelerator comprises of a global content delivery network (CDN) with edge servers located all around the world. When a visitor visits your website he or she will be served the content from the nearest edge server, which dramatically reduces page load times. The WebOrion™ Accelerator also performs optimization and caching on your website’s assets, which reduces load on your web server, making it quicker to respond to requests under high load.

What are the WebOrion™ Accelerator cache settings?

When using the WebOrion™ Accelerator, you can choose to cache static content (e.g. images, scripts, etc.) and set a cache duration. A longer cache duration will help to reduce the load time more than a shorter duration. However, during this period, any content that was updated may not be reflected immediately in your site as it is cached for the duration.

If you are regularly updating your website, you may choose to set a shorter cache duration temporarily.

How can I purge the WebOrion™ Accelerator CDN cache?

You may request for a cache purge by going to CDN & Web Server settings > Cache Settings, and clicking “Purge Cache”. The cache purge request may take up to 15 minutes to take effect. After the purge is complete, the cached files for your domain on all our edge servers around the world will fetch the latest version of the site from your web server.

WebOrion™ Monitor

How does the WebOrion™ Monitor help to protect my website?

Even though the WebOrion™ Protector will help to protect against many threats and vulnerabilities, the WebOrion™ Monitor complements it by monitoring your website for any unauthorised changes. This two-pronged approach will ensure that your website remains safe from attacks, and in the rare event that an incident occurs, you will be first to be notified should a defacement occur.

The WebOrion™ Monitor periodically polls your website for changes, and immediately informs you when it detects that a change has been made. You can configure the WebOrion™ Monitor to only watch for changes in specific important regions of your website, so that you will not be wrongly notified if you had made an actual change to your website yourself.

Can I use the WebOrion™ Monitor to poll for changes on other websites?

Yes. Although the WebOrion™ Monitor was designed to detect any unauthorised changes made to a web page, you can also use it to monitor any other URL on the Internet. Some example use cases may include:

  • Monitoring a product page for changes in prices
  • Monitoring competitors’ websites for updates
  • Monitoring a page which does not provide real-time updates via an API
  • …and so on!
How can I configure the sections of my website to be monitored?

The WebOrion™ Monitor polls for changes on a per-URL basis, and will be charged according to the number of URLs that you require.

You can either configure the monitor to poll for changes on the entire web page, or you may select specific regions on your web page to be monitored instead. This will allow you to modify some content on your home page, for example, without wrongly triggering alerts.

How does the WebOrion™ Monitor determine if an unauthorised change is made?

Each time the WebOrion™ Monitor inspects the web page, a screenshot of the page is taken. The monitor compares the screenshot with previously captured screenshots to calculate the similarity metrics in terms of a percentage.

If the percentage change surpasses the threshold amount, you will be notified via email immediately.

What is the ``Screenshot delay`` setting?

The screenshot delay is a configurable wait time before the WebOrion™ Monitor takes a screenshot of the web page. This option is ideal for web pages that have a lot of elements and may take some time to load (e.g. video backgrounds).

How do I determine what are the changes that the WebOrion™ Monitor has detected?

Under the Incident Details section, any changes detected by the WebOrion™ Monitor will be highlighted in red.

Need More Help?

We’ll be glad to help you in any way you can.

Contact Us

Fortify, accelerate and monitor your website today.

Setting up your website only takes 10 minutes.