Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [web-application-firewall]

generic term for set of software, web server extensions or hardware designed to filter WWW traffic at the application level in TCP network model.

0
votes
0answers
17 views

How to setup an Azure Firewall in a hub-spoke model to forward to the correct spoke subnets?

I have an Azure environment with different VNETs for each environment (dev, test, and so on). Each VNET has its own Azure Application Gateway with WAF enabled (due to the limitation on number of sites/...
2
votes
1answer
43 views

Possible to use Azure Application Gateway and Azure Firewall on AKS?

I have an AKS cluster running on Azure (managed Kubernetes). I'd like to put a WAF in front of it, using Azure Web Application Gateway. I think this is possible. But I also want a firewall in front ...
0
votes
0answers
17 views

Modsecurity v3 CRS + Nginx - separate vhost inclusions

I have the following setup: Nginx 1.14 ModSecurity v3 CRS v3 ModSecurity nginx connector I want to be able to specify in every vhost different collection of rules. For example: vhost1: filter all ...
0
votes
1answer
126 views

Securely allow inbound return from api calls

Is it secure to open inbound Firewall rule from source 0.0.0.0/0 to receive inbound return IPv4 traffic from the internet (I need this only for requests that are originated in the subnet)? I am ...
0
votes
1answer
242 views

How do I decrease the sensitivity of the AWS WAF sql injection filters?

We have our application set up on Amazon Web Services behind an ALB (Application Load Balancer) with a AWS WAF (Web Application Firewall). The WAF includes a rule to block SQL injection attempts using ...
0
votes
1answer
211 views

Enabling WebSockets (SignalR) with a Barracuda WAF

I am currently tearing my hair out at work trying to resolve an issue with a web application that uses SignalR over WebSockets where traffic is directed through a Barracuda Web Application Firewall (...
0
votes
0answers
122 views

Modsecurity does not accep files (jpeg, mp4 and zip) from Android device

I have compiled modsecurity with nginx(1.13.6) on ubuntu 16.04. I am able to post requests from iOS devices. But Android devices(Retrofit Http client) are not allowed to upload files(jpeg, mp4 and zip)...
0
votes
1answer
23 views

SNAPT WAF Implementation

I just got the responsibility of implementing and managing the WAF for our SNAPT install. I have the WAF enabled on the Admin page for testing right now. I finally got an error so I can learn what the ...
0
votes
2answers
171 views

About an idea to parry DDoS attacks

Background: I'm building a web application using Amazon API Gateway, Amazon S3, AWS Lambda and so on. Note: If you don't know about AWS, any pieces of advice would be highly appreciated. Searching ...
7
votes
1answer
3k views

AWS EC2 deny single ip address and allow all

I have a AWS EC2 instance and want deny access on port 80 for a single ip address (a bad bot). AWS console it seem support only "allow" rules. How deny a single ip address?
1
vote
2answers
460 views

how to modificate modsecurity rule action for only one parameter?

I have a modsecurity with Core Rule Set. And I have POST-request with 3 parameters: Par1 = "base64-encoded XML "& Par2 = "url" & Par3 = "hash". I want to modificate CRS rules to base64Decode ...
0
votes
1answer
169 views

Unable to access Node Server from external network

I have a VM with two public IPs. I have installed OpenStack controller node on the VM. I have access from the external network to Horizon and Keystone service running on apache2 web server on ports 80 ...
1
vote
0answers
45 views

nginx naxsi error - could not build the wlr_url_hash

I am getting this error in an nginx server compiled in with naxsi nginx: [emerg] could not build the wlr_url_hash, you should increase wlr_url_hash_bucket_size: 512 nginx: [emerg] $URL hashtable init ...
0
votes
1answer
55 views

Web app architecture - firewall blocking

I'm currently working on a web app and seem to be having a few problems with the app being blocked by office firewalls of our test groups. My background is in design / front end so my knowledge of ...
-1
votes
1answer
98 views

What are the MOST Important Things to Configure on a WAF? Specifically Barracuda Web Application Firewall

I will be hosting a web application on a cloud provider. This will be protected behind a WAF specifically Barracuda's Web Application Firewall Vx. I do not have too much experience with WAF security....
0
votes
1answer
195 views

Barracuda Web Application Firewall WAF - HTTP - Barracuda Does Not Filter Links Clicked on Page

I am trying to figure this out. Basically the virtual IP 192.168.1.110 will filter port 80 to the real ip address 192.168.20.110. I can confirm this in the logs. When I click any link on the page (...
11
votes
1answer
331 views

applicure dotdefender ISAPI filter causing pdf issue

I have recently migrated a web server form Server 2008 R2 to Server 2012 R2 The dotdefender application firewall works fine except for one issue. On large PDF ~15MB or more it take anywhere from 1 - ...
-4
votes
1answer
685 views

Restrict Access from certain machines to my Web Application in LAN [closed]

I am trying to deploy a Local Network web application, which should not necessitate a client login. The requirement is to block certain machines, (not users, just a few computers, the application ...
1
vote
1answer
898 views

What is the difference between a SPI Firewall and an Application Layer Firewall?

What is the difference between a SPI Firewall and an Application Layer Firewall? In what circumstances would I prefer one over the other?
1
vote
2answers
180 views

What tech. is required to build a firewall that dynamically opens ports after users authenticate through a web form against Active Directory?

I need to expose via Internet an insecure internal web app that can't be modified to be made intrinsically more secure. The most common solution for this problem is to access the web app through VPN. ...
0
votes
1answer
151 views

Spoof IPP response in firewall?

How I do to spoof a IPP "Unauthorized" response? Have read the IPP specification documents but cannot find exactly how a IPP response should look like. Any examples? Basically, I have a IPP printer ...
3
votes
2answers
6k views

Securing Apache Solr in production

I am setting up Apache Solr 4.1 that will be used to index data for a web app. Only the web app should have access to the Solr. Users and other clients will not talk directly to Solr. What are some ...
2
votes
1answer
208 views

Is there any application/firewall to detect content scrapers? [closed]

We are noticing that a significant amount of web traffic is from content scrapers (determined due to their crawling pattern). They are useless visitors to us but consume a lot of our resources (...
0
votes
1answer
227 views

HTTP-CLASS-Redirecting traffic-F5

Can we redirect https traffic to a particular real server using http-class in F5? i.e whether http-class works with both http and https traffic.?
0
votes
1answer
813 views

F5 - URL redirect without irule

I have a main domain - url which is getting load-balanced through VIP between 2 Real Servers in F5 and I want a sub-domain of the main url not to be loadbalanced but to be pointed to a single real ...
3
votes
1answer
555 views

Examples where an AWS Security Group is not sufficient as a firewall?

Currently I am using only an AWS security group for one of my EC2 instances but have given some thought to adding a firewall to that stack as well. I'd be looking at using either iptables, or ...
0
votes
1answer
493 views

SonicWALL SRA blocks load test as a DoS attack

I am evaluating the Web Application Firewall (WAF) service on a SonicWALL SRA virtual appliance. When I try to load test the protected website, SonicWALL blocks my requests with this error: "Reset ...
2
votes
0answers
405 views

Barracuda 660 WAF SNMP - Barracuda-BWS::totalAttacks

I've come across a little problem with retrieving stats via SNMP from a Barracuda Web Application Firewall 660. According to both the documentation (page 211), and the MIB defination, doing an SNMP ...
0
votes
2answers
1k views

Apache2 mod_security simple default deny rules for specific directory

How to configure the simplest useful default-deny rule set for mod_security? I want to configure mod_security to allow only very specific queries to single directory: In short: I use Apache as a ...
1
vote
2answers
522 views

What web application firewall do you use? What should I use? [closed]

What web application firewall do you use? I'm primarily interested in something I can deploy on the perimeter that can protect multiple Apache and IIS servers, but I'd like to hear all answers. Tell ...
2
votes
1answer
3k views

node-waf nodejs failing

When trying to compile Gilt Hummingbird for NodeJS, I get this error, as node-waf is missing. rm -rf build .lock-wscript bson.node node-waf configure build make[1]: node-waf: Command not found make[1]...
1
vote
0answers
636 views

ActiveSync on iOS 4.2 no longer supports cookies?

We have a in-house developed WAF protecting our OWA (activesync) webserver, and part of its function requires long-lived Cookies on the "browsers". We're trying to get it to support iPhones via the "...
2
votes
1answer
262 views

What is the funniest firewall rule set? [closed]

What is the finniest firewall rule set that you know of? It doesn't necessarily have to stop attacks, you could just be having fun with the attacker. Any type of firewall will do, Packet Filter (...