Saturday, January 28, 2017

Saturday, November 12, 2016

What is a WAF?

WAF stands for Web Application Firewall. This is an application which acts over HTTP conversations that happens between a client and a server. WAFs mission is to protect the web application or set of web applications as proxies are to save clients. So many techs describe WAFs as reverse proxy. What a typical WAF does is, it applies set of rules over an HTTP conversation. Doing so it protects the server from attacks like SQL injection and XSS (cross site scripting). WAFs may come in the form of an appliance, server plugin, or filter, and may be customized to an application.

Some web application firewalls are as follows:

  • Barracuda Networks Web Application Firewall
  • Citrix NetScaler Application Firewall
  • F5 - BIG-IP Application Security Manager
  • Fortinet FortiWeb
  • Imperva SecureSphere
A detailed description about these and what type of security these provide to the application can be found from here.