WAF (Web Application Firewall) is a function to prevent website alteration and information leakage due to unauthorized access.
It is enabled by default, and there is no need for customers to perform any operation to enable it.
How to disable WAF
WAF can be disabled on some servers. Please refer to the following article for details.
Other security concerns
Please refer to the following related articles for server security.