diff --git a/google_fastly_waf/main.tf b/google_fastly_waf/main.tf
index 1868e5b0..b3d3b53b 100644
--- a/google_fastly_waf/main.tf
+++ b/google_fastly_waf/main.tf
@@ -65,7 +65,7 @@ resource "fastly_service_vcl" "default" {
       override_host      = lookup(backend.value, "override_host", "")
       port               = lookup(backend.value, "port", 443)
       request_condition  = lookup(backend.value, "request_condition", "False")
-      shield             = lookup(backend.value, "shield", "")
+      shield             = lookup(backend.value, "shield", "BFI")
       ssl_sni_hostname   = lookup(backend.value, "ssl_sni_hostname", "")
       use_ssl            = lookup(backend.value, "use_ssl", false)