Changelog
Changes we ship to the protection agent and dashboard, newest first. We say what changed, not how it works underneath.
Sites that enable Full HTTP Protection are now covered on their real public port, with no port changes needed. Verified end to end from outside the network.
With Full HTTP Protection on, a request whose Host header doesn't match a site on the server is now rejected instead of passed through. Plain HTTP on port 80 is still on the list to cover.
A port declared with the Database purpose and no source-IP restriction is now blocked from the public internet, not just flagged in Verify. Restrict the port to specific IPs if you need remote access.