Web Application Firewall (WAF)
Our distributed cloud based WAF solution protects web applications and APIs against sophisticated attacks and common vulnerabilities including the OWASP, such as;
SQL Injection
Cross-Site Scripting (XSS)
Local File Inclusion
Remote File Inclusion
PHP Code Injection
Java Code Injection
Shellshock
Unix/Windows Shell Injection and more.
Medianova WAF: Web App and API Rule Management
Managed rulesets incl. OWASP core ruleset: You can leverage pre-configured rulesets, including the widely recognized OWASP Core Ruleset, to fortify your web applications and APIs against common security threats.
Customizable rules: You can tailor security rules to suit your specific application needs, allowing you to address unique requirements and potential threats effectively.
Rich Analytics: You can monitor and analyze traffic patterns, detect security events, and assess the effectiveness of your security rules. The rich analytics capabilities empower you with actionable intelligence, ensuring a proactive and vigilant approach to web application security.
Continuous update of rulesets and access to the most recent threat intelligence: Your security measures stay current with automatic updates to rulesets, providing real-time protection against evolving threats through access to the latest threat intelligence.
IP blacklisting and whitelisting: You have granular control over network access by blacklisting or whitelisting specific IP addresses, adding an extra layer of defense against unauthorized or potentially malicious entities.
Geo-blocking: You can prevent access from specific geographic regions, and reducing the risk of targeted attacks from particular locations by implementing Geo-blocking.
HTTP security headers: You can deploy HTTP security headers, enhancing protection against various web-based vulnerabilities.
You can find instructions for activating your Medianova WAF here.
Distributed Cloud Based WAF vs Appliance
Distributed Coverage and Capacity: A distributed server network spanning multiple locations offers greater capacity and stronger defense against threats. Appliance-based solutions, on the other hand, are constrained to a few data centers, and therefore may face saturation risks, potentially allowing attacks to evade defenses.
Cost-Efficiency: Cloud based WAF eliminates upfront hardware and installation costs. Appliance based solutions have significant upfront hardware and ongoing operational expenses.
Instant Activation: Cloud based WAF can be swiftly activated, without the need for physical installations or complex configurations. Appliances necessitate a longer setup time due to lengthy procurement, physical installations, and complex configurations.
Real-time Updates: Cloud based WAF can receive automatic, real-time threat intelligence updates, ensuring continuous protection against the latest threats. Appliance based solutions usually require manual updates.