# Configure your applications ## Add a new domain On the left side menu, click on ***Sites >> Domains***. Once inside click in:
And you will see a form to enter a new domain name. ![Image 1: Domains management page](https://3407554211-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Lc6SmWC2XaTk3mzBSlS%2F-Lc76ZAGg83M7B1vvwnS%2F-Lc784f3qk8xgC96MUEz%2Fimage.png?alt=media\&token=0b386da6-d7e9-482a-9513-fe45788a9fed) ## Add a new subdomain In the section ***Sites >> Domains*** you can add a new subdomain to a previously registered domain. Press the next button:
And once pressed press the next button:
![Image 2: New subdomain form](https://3407554211-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Lc6SmWC2XaTk3mzBSlS%2F-Lc76ZAGg83M7B1vvwnS%2F-Lc78gQRI0IKuA6aL5PK%2Fimage.png?alt=media\&token=25620c1b-6ba1-4050-bc18-313580c5abc9) The process will consist in 6 simple steps to configure all the necessary information to protect your web application with *SecureAccess® CLOUD*: * In the first step we will be asked to point the *DNS* of the resource to our secure server ***my.secureaccess.com***
* In the second step you must enter general data about your subdomain, like description, name and communication protocol (*HTTP/HTTPS*).
* In the third step you need to add the IP address of your server. You can add more than one and *SecureAccess® CLOUD* will act as a load balancer. 
* Fourth step will allow you to create a list of whitelisted IP address, request coming from this address will skip authentication process for this subdomain. \ \ **This will disable the access control mechanism, so use it carefully**. 
* In the fifth step allow you to upload your own *SSL* certificate for the HTTPS communication. In case you don´t have one, *SecureAccess® CLOUD* can generate one for you. To use this option, you must first point your subdomain *DNS* to our reverse proxy (***my.secureaccess.com***). In a few seconds your new certificate will be generated and ready to use.  Select the option that fits you better and click on Next. 
* Last step gives you the opportunity of enabling *SecureAccess® WAF* (*Web Application Firewall*), which will analyze all the requests going through the platform blocking the ones containing malicious content. This will help in the prevention of *SQL injection* or *XSS* attacks. As an administrator you will receive notifications and alerts when a request is deemed suspicious and therefore blocked.  Once all steps are done, you can press:
And your subdomain will be registered and enabled.