> For the complete documentation index, see [llms.txt](https://clients.medianova.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://clients.medianova.com/products/security.md).

# Security

Explore Medianova security features for access control, application protection, traffic management, SSL/TLS, and origin security.

Medianova provides security controls for protecting CDN Resources, applications, and origin infrastructure against unauthorized access, malicious requests, automated traffic, and network-level attacks.

Security features can be configured according to the requirements of each workload. Some controls operate directly on CDN Resources, while others provide application-level or network-level protection.

## Access and Request Controls

Use request-level controls to determine how clients can access content delivered through Medianova CDN.

### Always Use HTTPS

Redirect HTTP requests to HTTPS to ensure that content is delivered over encrypted connections.

Learn about [Always Use HTTPS](/products/security/always-use-https.md)

### Security Token

Restrict access to protected content by requiring a valid security token in the request URL. Requests without a valid token are denied.

Learn about [Security Token](/products/security/security-token.md)

### Hotlink Protection

Prevent other websites from linking directly to your content by validating the `Referer` header.

Learn about [Hotlink Protection](/products/security/hotlink-protection.md)

### IP Restriction

Control access to content based on client IP addresses.

Learn about [IP Restriction](/products/security/ip-restriction.md)

### User Agent ACL

Allow or block requests by matching the `User-Agent` header in full or in part.

Learn about [User Agent ACL](/products/security/user-agent-acl.md)

### Geoblocking

Control access to content based on the geographic location associated with a request.

Learn about [Geoblocking](/products/security/geoblocking.md)

## Application and Bot Protection

Use application-layer security controls to detect or restrict malicious and automated requests.

### Bot Protection

Block known malicious bots to protect content from automated attacks and scraping.

Learn about [Bot Protection](/products/security/bot-protection.md)

### Web Application Firewall (WAF)

Inspect HTTP and HTTPS requests and apply security policies designed to protect web applications against application-layer threats.

Learn about [Web Application Firewall](/products/security/web-application-firewall-waf.md)

## Traffic Protection

Use traffic controls to limit excessive requests and mitigate availability risks.

### Rate Limiting

Control the rate of incoming requests to a CDN Resource and define how traffic exceeding the configured limit is handled.

Learn about [Rate Limiting](/products/security/rate-limiting.md)

### Network Rate Limit

Apply network-level traffic limits according to the configured policy.

Learn about [Network Rate Limit](/products/security/network-rate-limit.md)

### DDoS Protection

Protect services against distributed denial-of-service attacks designed to exhaust network or application resources.

Learn about [DDoS Protection](/products/security/ddos-protection.md)

## Connection and Origin Security

Use transport and origin security features to protect connections between clients, Medianova CDN, and origin infrastructure.

### SSL/TLS Encryption

Secure HTTPS connections between clients and Medianova edge servers using SSL/TLS certificates.

Learn about [SSL/TLS Encryption](/products/security/ssl-tls-encryption.md)

### Origin Basic Authentication

Configure HTTP Basic Authentication credentials for requests sent from Medianova CDN to a protected origin.

Learn about [Origin Basic Authentication](/products/security/origin-basic-authentication.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://clients.medianova.com/products/security.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.