3 ms·
Yup. Just consider WAF as a low-pass filter that clean out the noise and let you focus on the real attacks that get through.
by dikei 5y ago
Yup. Just consider WAF as a low-pass filter that clean out the noise and let you focus on the real attacks that get through.
- smolder 5y agoAnother good use case is hardening web applications that you aren't licensed to modify, or otherwise can't secure in a way that's internal to the app. (That could be due to limited time, too much complexity, inaccessible source code, or missing domain knowledge, maybe.) Using a SaaS WAF for greenfield development always seemed to me like... I guess you'd say an "architecture smell" as opposed to code smell. More nodes in a network graph are worth avoiding if you can consolidate without losing functionality, velocity, etc. Using WAF to get defense in depth starts making sense to me only when the paranoia level is sufficiently high and you're out of relatively effective ways to harden the other layers further.