3 ms·
> While waiting for the patch, a WAF can quickly block all requests to the /setup endpoint. So can IIS request filtering or whatever exists in Nagios. Right on
by sebazzz 3y ago
> While waiting for the patch, a WAF can quickly block all requests to the /setup endpoint.
So can IIS request filtering or whatever exists in Nagios. Right on the webserver.
- JoeSpaghettio 3y agodepends on the org. The appsec team, may not have access to the webserver in production atleast not quickly. But will have access to modify a WAF they own.
- wiml 3y agoI suppose from that perspective WAFs exist simply because of Conway's law.
- threeseed 3y agoMany applications these days don't have web servers in front of them.