Shulou(Shulou.com)06/03 Report--

This article will explain in detail what functions WEB application firewall has, and the editor thinks it is very practical, so I share it with you for reference. I hope you can get something after reading this article.

Although there is the word "firewall" in the name of WEB application firewall, WEB application firewall is completely different from traditional firewall and Web security gateway. Traditional firewall only blocks some underlying information (network layer, transport layer), while WEB application firewall goes deep into the application layer and filters all application information, which is the essential difference between WEB application firewall and traditional firewall. The difference between WEB application firewall and Web security gateway is that the latter protects the Internet behavior of enterprises from infringement, while WEB application firewall is specially designed to protect Web-based applications. The WEB application firewall is located between the Web client and the Web server. It analyzes the communication of the application layer and discovers the behavior that violates the predefined security policy. WEB application firewall has the comprehensive ability of prevention in advance, protection in the event and compensation afterwards. Taking the core protection capability of WEB application firewall as an example, WEB application firewall, as a professional Web security protection tool, can deal with all kinds of security threats in HTTP/HTTPS applications based on two-way decoding and analysis of HTTP/HTTPS traffic, such as SQL injection, XSS, cross-site request forgery attack (CSRF), Cookie tampering and application layer DDoS. It can effectively solve the security problems such as web page tampering, web page hanging horse, sensitive information leakage and so on, and fully ensure the high availability and reliability of Web applications. A standard WEB application firewall requires at least three major functions:

First, security protection. Not only must have the defense ability to the attack against the Web server, but also must have the supervision ability to the data leak, can carry on the IP audit.

Second, speed up. In addition to protection, enterprise users need to control the running efficiency of applications in the network, such as buffering of TCP protocol, acceleration of SSL VPN, unloading of access management, WEB application firewall must be able to provide corresponding acceleration capability.

Third, scalability. The WEB application firewall is related to the Web server when connecting in the background, but it cannot protect only one server. In fact, many enterprises have a large number of Web servers, and WEB application firewall needs to support application delivery and load balancing. WEB application firewall can not only detect known types of attacks, but also detect abnormal usage patterns and block currently unknown attack methods. For example, there is usually a limited amount of information exchanged between a Web application and a Web client. If the WEB application firewall detects that the Web server is returning a much larger amount of data than expected, it will cut off the transmission in time to prevent further data leakage.

This is the end of this article on "what are the functions of WEB application firewall?". I hope the above content can be of some help to you, so that you can learn more knowledge. if you think the article is good, please share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.