Protect your web applications from threats like SQL Injection and XSS using our integrated Web Application Firewall. Learn how to configure the OWASP Core Rule Set, train your WAF, and leverage this crucial layer of defense for security and PCI compliance.
A WAF isn't a magic bullet, but, as part of a defense in depth strategy, a properly configured WAF should catch and stop common, everyday attacks...
In this example, I’m going to add a new transformation function to ModSecurity to calculate the Scrabble score of a variable. This will allow us to block HTTP requests containing query string parameters with a Scrabble score above a chosen threshold...
In the world of web application security, it can be invaluable to consider a user's behaviour across the entire duration of their web app session...
Let's look at the best way to use the WAF with as little pain as possible!..
We’re often asked how to configure our load balancer to protect both web servers and users...
Imagine you’re running a business and you often see malicious-looking web traffic from the other side of the globe hitting your website...
Our helpdesk often encounters confusion about Web Application Firewalls, or WAFs - what they are, how to use them, and what issues they can potentially cause...
The web-based login to your application is a juicy target for hackers. And once they get past the login, they can cause you some serious pain...
An engineer at a business using Darktrace, confessed that many IT staff ignored the pricey security software because it sent so many false alerts...
In the Azure Management Portal, select the Virtual Machines option, click on the newly deployed Load Balancer VM, click on Network interfaces and then select the network interface attached to the load balancer, then click IP configurations and ensure that IP forwarding is Enabled...
The WAF addresses the OWASP Top 10 vulnerabilities and is very quick and simple to deploy...
Security through obscurity is not a great idea when it is your ONLY protection technique. For example moving your SSH port from 22 -> 23 won't fool any hackers for long! However, I've always liked putting a 'double login' in front of important web sites to frustrate simple automated hacking tools...
