Collaborate Disseminate
Company policy states that all internet-facing components must be protected with a WAF. However, I have an Azure Blobstorage that stores public web assets. I don’t think putting it behind a WAF makes sense.
What are the benefits of putting… Continue reading Do I need to protect my Azure Blobstorage with a WAF if all the contents inside are for public consumption?
I’ve been using Ninjafirewall on WordPress websites for a while.
I recently installed a new caching plugin on my main website and I noticed the firewall log which usually has around 5000 blocked threats per month has less than 10 so far th… Continue reading Can Caching cause my WAF logged events to drop?
An often-overlooked element of security is the Web Application Firewall (WAF), especially in cloud computing. In this article, I explain what a WAF does, the different kinds of WAF, and I discuss why you should deploy one or more WAFs in your architecture. What is a Web Application Firewall (WAF)? A Web Application Firewall, often…
The post The Ultimate Guide to Web Application Firewalls (WAF) appeared first on Petri IT Knowledgebase.
Continue reading The Ultimate Guide to Web Application Firewalls (WAF)
I need to know what is "method enforcement" inside WAF Preconfigured ModSecurity rules.
How to test this attack on magento website? What is security best practice to prevent this?
Continue reading What is Method Enforcement. How to simulate this attack?
Is there a best practice IP address that is safe to use as a placeholder in a live public system on the Internet?
e.g. In a similar capacity, the domain name example.com is reserved and can be safely used without risk of this becoming som… Continue reading Which IP address would be most safe and suitable to use as a placeholder in a live system?
Is there a way in WAF(FortiWeb) to prevent our website to be browsable using its web public ip address?
Continue reading WAF: Access the website via its public ip address [closed]
How can I block web scraping using Azure WAF?
Continue reading Unable to block web scraping using Azure WAF [closed]
As a cybersecurity enthusiast, I tried to do the following exercise :
A Fortiweb-VM Version 6.3.11 linked to a DVWA (vulnerable platform), with a burp, I took a request of the Fortiweb platform and send it to the repeater :
In the rep… Continue reading CVE-2021-22123 fortiweb bypass?
I have hit a conceptual roadblock here and, to be honest, do not really have a lot of experience with WAFs or firewalls in general. (I did go through this very nice explanation to get upto speed with the basic understanding of firewalls. )… Continue reading Can a WAF transform HTTP response
I am new to WAF configuration. we just enabled it on our FW (Sophos). Users are getting errors while using the app with different Rule IDs. For example, 98XYZ. Now, we are looking for a way to find what is the exact reason of issuing the … Continue reading Solving WAF problem