A Web Application Firewall (WAF) helps protect your web applications from common web exploits that may affect availability, compromise security, or consume excessive resources.  A WAF provides control over how traffic reaches applications through the creation of policies.  These policies can block common attack patterns, such as SQL injection or cross-site scripting or filter out specific traffic patterns you define.

Benefits

Web Application Firewalls protect web applications and the data they contain against certain classes of network-based attacks by examining web requests for malicious qualities. In detection mode, these devices escalate requests of concern to analysts to identity potential security issues.  In prevention mode the devices automatically block malicious traffic effectively stopping an attack before it happens.  Your data, business, and research interests are better protected when these technologies are in place.

Key Features

• Monitors web traffic for exploits and other malicious payloads and may automatically drop malicious traffic.
• Highlights potentially malicious traffic for analysts to help detect potential data breaches.

What to Expect

This service normally will be available 24 by 7 except for standard change windows, as described in IS&T’s standard policies, procedures, and schedules for making changes.  This service currently deployed in Amazon Web Services (AWS) exclusively, and may be subject to other AWS terms and conditions.

Requirements

This service is currently available only to servers deployed in AWS.

Getting Started

Departments wishing to protect specific resources should schedule a network design consultation.