InfoQ Homepage Web Application Firewalls Content on InfoQ
News
RSS Feed-
Ephemeral IDs: Cloudflare's Latest Tool for Fraud Detection
During its recent Birthday Week, Cloudflare introduced Ephemeral IDs, a new feature for fraud detection. The tool identifies fraudulent activity—whether from bots or humans—by linking behavior to a specific client rather than an IP address.
-
Enhanced Protection for Large Language Models (LLMs) against Cyber Threats with Cloudflare for AI
Cloudflare recently announced a new capability called Firewall for AI in its Web Application Firewall (WAF) offering. The capability adds a new layer of protection that will identify abuse and attacks before they reach and tamper with Large Language Models (LLMs).
-
Microsoft Previews Azure Firewall Basic for Small-Medium Businesses
Microsoft recently released the public preview of Azure Firewall Basic for small-medium businesses (SMBs), providing enterprise-grade security at an affordable price. The company offers the Basic SKU as it sees SMBs as particularly vulnerable to budget constraints and gaps in specialized security skills.
-
AWS Firewall Manager Supports Palo Alto Networks Cloud Next Generation Firewalls
AWS recently announced that Firewall Manager supports Palo Alto Networks Cloud Next Generation Firewalls (NGFW). Palo Alto Networks partnered with the cloud provider to offer a managed firewall service designed to simplify securing AWS deployments.
-
AWS WAF Introduces Fraud Control - Account Takeover Prevention
Amazon recently introduced Fraud Control - Account Takeover Prevention, a new feature of AWS Web Application Firewall to protect login pages at network edge.
-
AWS and Cloudflare Add Bot Management Features to Their Firewalls
Both AWS and Cloudflare have released new bot mitigation features into their respective firewall products. Both releases provide additional features for filtering out unwanted bot traffic from reaching the application.
-
Cloudflare Announces New Web Application Firewall
Cloudflare has recently introduced a new Web Application Firewall. The latest engine is written in Rust, provides better performances and integrates with other Cloudflare products.
-
Web Application Firewall Causes Outage
The CloudFlare outage from June 2nd was caused by high CPU consumption of a backtracking regular expression, defending against a Sharepoint CVE.
-
Benefits of Microsoft’s New Versions of Azure Application Gateway and the Web Application Firewall
In a recent blog post, Microsoft discusses the benefits of the generally available releases of Azure Application Gateway V2 Standard SKU and Web Application Firewall (WAF) V2 SKU's. Microsoft fully supports them with a 99.95% SLA, significant improvements and capabilities.
-
Microsoft Announces New Capabilities in Azure Firewall: Threat Intelligence and Service Tags Filters
Recently Microsoft announced two new capabilities for Azure Firewall, a cloud-native firewall-as-a-service offering, enabling customers to govern all their traffic flows using a DevOps approach centrally. The firewall service supports both application (such as *.github.com), and network level filtering rules.
-
Amazon Launches a New Cloud Security Service: AWS Firewall Manager
Amazon has launched a new service called AWS Firewall Manager, providing AWS customers a way to configure AWS Web Application Firewall rules across multiple accounts centrally. The AWS Firewall Manager is a part of Amazon’s recent launch of several services for security and compliance.
-
NGINX Releases Microservices Platform, OpenShift Ingress Controller, and Service Mesh Preview
NGINX Inc has released the NGINX Application Platform which aims to be a “one stop shop” for microservice developers; a Kubernetes Ingress Controller solution for load balancing on the Red Hat OpenShift Container Platform; and an implementation of NGINX as a service proxy for the Istio service mesh control plane.
-
Amazon Announces AWS Shield for DDoS Protection
At the recent re:Invent 2016 event, Amazon announced a new service called AWS Shield, which provides customers with protection from Distributed Denial of Service (DDoS) attacks. This announcement comes just over a month after Amazon was impacted by a DDoS attack on a DNS provider that Amazon used, Dynamic Network Services (Dyn).
-
NGINX Release Targets Application Security
NGINX Plus R10 has been released, with a focus on improving application security, and network integration. The release supports API authentication by validating JSON web tokens (JWT), and improved SSL/TLS performance in production with support for elliptic curve crypto (ECC) certificates.
-
ModSecurity Framework Supports Web Application Security Core Rule Set
The latest version of ModSecurity, an open source web application firewall (WAF), supports Core Rule Set that can be used for defining rules to protect web applications from zero day and other security vulnerabilities. ModSecurity team released the version 2.5.10 which also includes features like parallel text matching, Geo IP resolution and credit card number detection.