Web Application Firewall-as-a-Service

WAFaaS provides a comprehensive solution to the broad range of issues inherent to maintaining the security and availability of your hybrid applications and networks, including:

• Application security: detection of attacks, attack prevention and support of compliance objectives
• Application performance: distinguishing between valuable user traffic and disruptive bot traffic, distribution and optimization of content closer to the end-user

Our WAFaaS services

Standard WAFaaS provides expertise to ensure your WAF is configured to provide maximum protection of your websites using the native features of the WAF. Notifications are sent to you directly from the WAF and all WAF related reporting is available in the WAF Portal.

Service management tickets, including service requests, change requests and incidents are available in our Manage Center. The WAF Portal is available directly from our Manage Center via single sign on. Here, a weekly report of summary activity is provided, along with access to the WAFaaS portal that includes access to 90 days of events. You can generate a PCI report or define a schedule to email (weekly, monthly, quarterly).

The Enhanced WAFaaS variant is specially designed for those users who require cyber-attack detection, customization of alerts and correlation with our other services. Logs and events generated by the WAF are further processed; our service uses customized rules and an anomaly-based detection and compliance profile to identify and report on the following categories of security incidents:

• Cyber-threat detection: Advanced analytics based on machine learning, behavior and kill chain modelling power by our threat intelligence. Identified threats get investigated by skilled security analysts that perform event driven threat hunting. Notification with remediation recommendations of the validated security incidents.
• Security best practices: Events that indicate a deviation from a predefined baseline of our definition of security best practices.
• Business policy compliance: Events that indicate a deviation from a predefined baseline of an organization’s custom business policy compliance requirements.