---
title: Configuring and Updating Baseline Protection
slug: ps/help/en_us/vwaf/ag/configuring-and-updating-baseline-protection
docTags: 
createdAt: 2026-08-02T10:05:40.123Z
---

[Baseline Protection](docId\:pUuki7UyD96FuXtxys4dG) provides instant security to your web applications with minimum configuration work.

:::hint{type="info"}
If you previously configured some rules in your security configuration, baseline protection adds its own rules up to the existing rules. Baseline protection never disables or modifies any of your custom rules.
:::

## First-Time configuration

To add baseline protection to an application:

1. Run the [Baseline Protection Wizard](docId\:TwAqUth4DVzNWPo4Vsyqj) for the application to which you want to add baseline protection (see [Using Wizards to Configure Applications](docId\:fuFTx6amSRULvfNwXXlgj) for details on how to enter the wizard). In the wizard, choose the most recent baseline for use.
2. Commit and activate your ruleset (see [Committing and Activating Ruleset Changes](docId:_GqXa7QQANnTkGmLO1_Hh)).

Your web application is now protected.

Usually, your configuration is now finished and does not require any further refinement. If you’re an advanced user, you can manually fine tune the [Baseline Protection Handler](docId:6KNhL1e8uhsVCu_AGZtV0), which was added by the wizard.

## How to find out when new baselines are available

vWAF automatically downloads new baselines, but it does not automatically add them to your ruleset. When vWAF has downloaded a new baseline, a hint on the Home page (see [Starting Administration](docId\:P2BW3jWoRfV-rf95L6pgG)) notifies you that an update is available for configuration and activation:

::Image[]{src="https://api.archbee.com/api/optimize/wxZG1KsS4xNkVZYoiu_o9/2RUvJ5x02MrEHuuG9RhJ1_guid-314bbd84-c259-41f2-b512-619bd3663249-outputlow699x736.png" position="flex-start" size="70" width="699" height="736" initialPath="guid-314bbd84-c259-41f2-b512-619bd3663249-output_low_699x736.png" githubPath="ag/vwaf_integrated/guid-314bbd84-c259-41f2-b512-619bd3663249-output_low_699x736.png" showCaption="false" indent="1"}

:::hint{type="info"}
If you see the message “didn’t check for updates” on the home page, check your installation settings (see [Installation](docId\:iXXTJVw7bfDmV1wppBgrl)). For the automatic update notification to work, you need an active Internet connection when you log in to vWAF. If you use a proxy, you must configure this proxy in the configuration file zeusafm.conf (attributes see [System Configuration](docId:3VcG4M4PeYN4G5D4tCsuL)).
:::

If you previously configured an alert (see [Configuring Alerts](docId:6QT-_Y-_kUtHhY8kyJEvf) and [New Baselines Available Event Source](docId\:CKgH-PyyrkFuxI4WoOqVT)), you are also notified by email or another event destination. You can also check for available baselines using [Baseline Management](docId\:SR3LlchXzabqRTxJwEMV2).

## Updating the baseline

To update the current baseline:

1. Run the [Baseline Protection Wizard](docId\:TwAqUth4DVzNWPo4Vsyqj) for the application for which you want to update the baseline. In the wizard, choose the option Update to latest version.
2. Commit and activate your ruleset (see [Committing and Activating Ruleset Changes](docId:_GqXa7QQANnTkGmLO1_Hh)).