Web Application Firewall (WAF)

Because web applications can be attacked in a variety of ways, a range of different protection mechanisms need to be implemented. Alongside basic security mechanisms on network level and Anti-DDoS, the Open Telekom Cloud also offers a Web Application Firewall.

The Web Application Firewall (WAF) acts as a shield for web apps and websites against multiple attackers such as SQL injection, malicious file execution, cross-site scripting (XSS), and more to keep them stable and secure. The WAF analyzes incoming requests and the response of the corresponding server in the Open Telekom Cloud, intelligently filtering out malicious traffic to safeguard data, ensure fast load times, and maintain uptime.

WAF uses the industry-leading semantic and regex engines to help accurately identify threats and significantly improve threat detection rate of hackers and bad actors attempting to bypass application security.

WAF precisely identifies malicious traffic to stop attacks based on pre-configured and customized rules.

Using decoding methods to prevent bypass attempts, WAF detects a wide range of common attack patterns, such as SQL injection or XSS.

A built-in extensive database of attack signatures detects and blocks dozens of common web attacks, such as SQL injection, XSS attacks, and webshells. Multi-engine cluster deployment and 24/7 monitoring ensure zero service interruption.

Masks sensitive data during attacks to prevent data leakage.

Configures rate limiting policies based on IP addresses or cookies to mitigate CC attacks.

Groups common HTTP fields together to create customized protection policies.

Configures specified webpage cache as the returned page during webpage updates.

Configures a blacklist or whitelist that can accurately block or allow specified IP addresses.

Handles false alarms by ignoring attack detection rules of specific requests.

Price calculator
Pricing Models: Security
Service description incl. price list (PDF)

User Guide und API-Beschreibung
Community