NLX は、お客様の数万に及ぶ分散されたソフトウェアエージェントから収集した、匿名化され確認済みの悪意のあるアクティビティに基づく、信頼性の高い IP レピュテーションに関するフィードです。顧客ネットワーク全体の攻撃パターンを独自に認識し、Web アプリや API に関するアラートを提供し、事前に脅威から保護します。
エンドポイントによって送信された予期しない値やパラメーターをモニタリングし、不正なリクエストをブロックして API の悪用を阻止します。Fastly は SOAP、REST、gRPC、WebSocket、GraphQL API の攻撃を検出、ブロックできます。GraphQL Inspection に関する詳細をご確認ください。
ボット対策
収益やユーザーエクスペリエンスに悪影響を及ぼす前に、悪質なボットを特定、対処することで悪質なボットによるWebサイトや API への攻撃を防ぎます。
アカウント乗っ取り対策
Web リクエストを検査し、悪意のある異常なアクティビティを検出してアカウント乗っ取り (ATO) 攻撃をブロックします。
Web アプリケーションにおける OWASP トップ10のセキュリティリスクについて、役立つインサイトや例、戦略を交えながら詳しく解説します。
ホワイトペーパーをダウンロード
Frequently asked questions
What is a WAF?
A Web Application Firewall (WAF) is a specialized security solution that shields a web application from the internet, safeguarding the server by detecting and blocking malicious HTTP and HTTPS traffic to and from a web service.
How does a WAF work?
WAFs often function as reverse proxies between the internet and protected web applications. However, you can also deploy WAFs in various configurations, including inline, cloud-based, or on-premises, to suit specific security requirements. Regardless of the deployment method, a WAF inspects all incoming traffic before it reaches application servers, creating a protective shield against potential threats.
What are WAF policies?
WAFs don’t protect against all types of threats and attacks; instead, they are one crucial element of a wider suite of tools used to protect websites and apps. The rules determining what traffic is deemed safe and what is malicious; in other words, what kind of traffic a WAF will allow or block are called “policies.”
What are the different types of WAF deployments?
1) Cloud-based WAFs: Cloud-based WAFs, hosted by vendors, offer a convenient and quick way to provide WAF protection.
2) Edge deployment: Edge deployment positions the WAF at the edge of a content delivery network (CDN) or closer to the traffic origin. This strategic placement blocks threats before they reach the network, providing an additional security layer.
3) Hybrid WAFs: Hybrid WAFs combine on-premises and cloud-based deployments, providing visibility into web requests directed at apps and APIs in any environment.
When should you use a WAF?
A WAF is a crucial part of a comprehensive security strategy. WAFs can help protect against OWASP Top 10 vulnerabilities, automatically. Use of a WAF is also essential when deploying new applications to protect them and monitor incoming traffic. WAFs are also great at preventing account takeovers and are helpful in maintaining regulatory compliance. Finally, they are essential for preventing DDoS attacks, preventing unauthorized access, and just improving your overall security posture.
