A web application firewall is an additional network security protection that does not replace traditional network firewalls. The WAF operates at the application layer of the network stack and inspects application traffic, network data packets, and their content to detect malicious traffic. LoadMaster WAF also supports SSL/TLS so that it can monitor encrypted web services network traffic.
The web application firewall acts a reverse proxy server and handles all session communication with clients. It is common practice to have LoadMaster load balancers working as both reverse proxy servers and WAFs. This hides application servers from the clients to enhance protection.
Using rule sets for known attack methods and looking for suspicious activity that might indicate an attack via new techniques, a WAF filters network traffic and only passes on safe requests and data.
The protections provided by a web application firewall are implemented via rules and policies. System admins can load rules from sets supplied by industry-leading security providers. Each organization has a unique application landscape, so each deployment can have custom rules for individual applications.
Watch the Web Application Firewall (WAF) 101 webinar video on securing modern applications and learn what a WAF does, what threats a to protect against, and find out how to secure your applications from changing vulnerabilities with Progress Kemp.