Fastly Next-Gen WAF

1y ago
50 Views
2 Downloads
661.17 KB
5 Pages
Last View : 3d ago
Last Download : 3m ago
Upload by : Adele Mcdaniel
Transcription

PRODUCT DATASHEETFastly Next-Gen WAFProtect your apps and APIs everywhere from a single solutionWhen your business is growing and innovating at a rapid rate, other webapplication firewalls can fail to keep up: too many false positives, limited DevOpsintegrations, and incompatibility with your mix of applications and differingarchitectures. The Fastly Next-Gen WAF (powered by Signal Sciences) providesadvanced web application and API protection (WAAP) for your applications, APIs,and microservices, wherever they live, from a single unified solution. Protection everywhere your apps operateFastly’s next-gen WAF flexibly deploys in any environment and canprotect apps and APIs wherever they are—in containers, on-prem,in the cloud, or on the edge—with one integrated solution.Key benefits Eliminate falsepositives: Over See real threats, not false positivesOver 90% of our customers have our WAF in full blocking mode. Wetake a threshold approach to blocking so you can run our solution infull, automated blocking mode in production with virtually no falsepositives. This enables you to scale protection without dealing withthe maintenance overhead that legacy WAFs require.90% of customersare in full blockingmode Trusted andproven: 90,000 app deploymentsprotected Deploy anywhere: Defeat advanced threatsGet protection that goes beyond OWASP Top 10 injection-style webattacks. We provide coverage against advanced threats includingaccount takeover (ATO) via credential stuffing, malicious bots, APIabuse and more—all in one solution.US: sales@fastly.com EMEA: team-emea-sales@fastly.com APAC: apac-sales@fastly.com 1.844.4FASTLYFrom edge to onprem with supportfor 100 cloudnative and datacenter platforms 2022 Fastly, Inc. All Rights Reserved

Fastly Next-Gen WAF2 Fast time-to-valueUnlike traditional web application firewalls, our next-gen WAFdeploys in an average of 60 minutes and you won’t pay extramanaged services fees for rules tuning or ongoing maintenance.“It works straight outof the box, scalesautomatically, and Visibility for faster remediationdoes a great job atproviding visibilitywhile securing theReporting and alerting feedback loops provide Layer 7 visibilityapplication.”across your entire app and API footprint. Integrations with DevOpsAnson Gomesand security toolchains empower teams to make decisions fromthe same baseline of security data provided via alerts, our API, orLead SecurityEngineer, Bettermentmanagement console.Confidently detect and block threats OWASP Top 10 - Protect against both classic OWASP Top 10 attacks and advanced web attacks. Account takeover (ATO) - Block ATO attacks by inspecting web requests and correlatinganomalous activity with malicious intent. API protection - Stop API abuse by monitoring for unexpected values and parameters submittedby endpoints and blocking unauthorized requests. Bot protection - Prevent bad bots from performing malicious actions against your websites andAPIs by identifying and mitigating them before they can negatively impact your bottom line oryour user experience. DDoS - Prevent malicious automated traffic that aims to overwhelm or abuse your apps sothey are unavailable. When defined traffic thresholds for key application functions are met weautomatically block the abusive traffic. Rate limiting - Stop malicious and anomalous high-volume web requests, reduce web serverand API utilization, and let legitimate traffic through to application and API endpoints with ouradvanced rate limiting features.US: sales@fastly.com EMEA: team-emea-sales@fastly.com APAC: apac-sales@fastly.com 1.844.4FASTLY 2022 Fastly, Inc. All Rights Reserved

Fastly Next-Gen WAF3Our Patented ApproachUsing lightweight software modules and agents throughout your web servers andapplications, we collect information about your security posture and surface thesereal-time event details through self-service dashboards, intelligent alerting, andpowerful reporting, powered by the Signal Sciences-developed Cloud Engine.Unlike common regex-based WAFs, the Fastly Next-Gen WAF uses SmartParse,our highly accurate detection method that evaluates the context of eachrequest and how it would actually execute to determine if there are malicious oranomalous payloads in requests. This feeds into our Network Learning Exchange(NLX), which recognizes attack patterns across our customer network and then“It’s refreshing towork with a securityproduct that not onlyprovides exceptionalsecurity benefits,but also prioritizesperformance,reliability, andproactively alerts and defends all our customers against the same attack.overall operationalOur management console quickly provides actionable information and key metricsJenner Holdenin a centralized interface, unlike many legacy WAF vendors who require you toVP of Informationlog in to multiple instances to gain visibility across your deployment footprint.manageability.”Security, AxonAdditionally, any request telemetry reported in our console can be ingested intoyour other security tools via our API.US: sales@fastly.com EMEA: team-emea-sales@fastly.com APAC: apac-sales@fastly.com 1.844.4FASTLY 2022 Fastly, Inc. All Rights Reserved

Fastly Next-Gen WAF4Deploy anywhereOur deployment options provide the flexibility in development, security, andoperations that teams need, enabling you to install our solution at different points inyour stack, from edge to on-premises. For further detail on deployment options, seeour Architecture and Deployment Overview.Cloud and container-native: Our agent-module pair installs at your web server,API gateway, or at the app-level within minutes. Native integrations with containerorchestration tools, like Kubernetes, and service meshes, like Envoy Proxy and Istio,provide visibility into both north-south (client-server) and east-west (service-toservice) requests.Data center and legacy apps: The Fastly Next-Gen WAF can be installed to inspecttraffic prior to web requests reaching the app or API endpoint such as at the loadbalancer (HAProxy, NGINX) or at the API gateway (Ambassador, Kong, Cloudentity).If your requirements don’t allow for installation at the load balancer or API gateway,“Signal Sciences[Fastly] in three words:Easy. Powerful. Magic.I would absolutelyrecommend SignalSciences to othercompanies lookingfor a WAF solutionthat does a greatjob protectingour agent can be deployed in reverse proxy mode.environments andEdge WAF: Our edge deployment bundles the best of the Fastly Next-Genof time and effort toWAF, always-on DDoS mitigation inherent in our edge cloud network, and TLSmanagement. Realize the performance benefits of our global network whilesimultaneously securing your traffic—all without having to deploy and managemultiple solutions.Cloud WAF: We host the agent for you so there’s no software to install. You justdoesn’t require a tontune and manage. Itgets things right thefirst time.”Kevin HanafordSenior Manager ofSecurity & IT, Remitlychange your DNS record to route traffic to our hosted agent where inspection anddecisioning occurs: legitimate traffic is let through to the app or API origin.Hybrid: Have a variety of infrastructure and technology in your environment? Ourrange of deployment options means you don’t have to cobble together differentWAF solutions or leave some apps and APIs unprotected. Deploy everywhere andstill get centralized management and visibility.Right-sized protectionFastly provides right-size protection to meet your business needs. Our Secure packages providecomprehensive web application and API protection in three easy-to-purchase options.US: sales@fastly.com EMEA: team-emea-sales@fastly.com APAC: apac-sales@fastly.com 1.844.4FASTLY 2022 Fastly, Inc. All Rights Reserved

Fastly Next-Gen WAFFeature5EssentialProfessionalPremier Platform DDoS* TLS encryption* Virtual patching Custom signals API and ATO protection rules Fastly Next-Gen WAF, deployanywhereRate limiting Eligible for Response Security Service add-onBy email and docs with nextSupportbusiness day SLABy email, docs, or supportBy email, docs, or supportportal. 1-hour response timeportal. 1-hour response timefor urgent issues via portalfor urgent issues via portal.* Customer must separately purchase a Fastly delivery product to leverage DDoS and TLS capabilities4.9/5 StarsGetting startedUnlock highly effective securitywithout impacting performance.Gartner Peer Insights Voice of theCustomerSignal Sciences, now part of Fastly, is the onlyvendor to be named a Gartner Peer InsightsTo learn more about oursecurity solutions, visit us atfastly.com/secure or contactus at sales@fastly.com.Customers’ Choice for Web Application andAPI Protection (WAAP) for four consecutiveyears and is one of the highest-rated WAAPsolutions on the market with an overall rating1of 4.9/5 as of 31 January 2022 based on267 reviews.Read the report - 1: Gartner Peer Insights content consists of the opinions of individual end users based on their own experiences with the vendors listed on the platform, should not be construed asstatements of fact, nor do they represent the views of Gartner or its affiliates. Gartner does not endorse any vendor, product or service depicted in this content nor makes any warranties,expressed or implied, with respect to this content, about its accuracy or completeness, including any warranties of merchantability or fitness for a particular purpose. GARTNER PEERINSIGHTS Logo is a trademark and service mark of Gartner, Inc. and/or its affiliates and is used herein with permission. All rights reserved.US: sales@fastly.com EMEA: team-emea-sales@fastly.com APAC: apac-sales@fastly.com 1.844.4FASTLY 2022 Fastly, Inc. All Rights Reserved

The Fastly Next-Gen WAF (powered by Signal Sciences) provides advanced web application and API protection (WAAP) for your applications, APIs, and microservices, wherever they live, from a single unified solution. PRODUCT DATASHEET Protection everywhere your apps operate Fastly's next-gen WAF flexibly deploys in any environment and can

Related Documents:

TAM in 2015 stands at 407M trending toward 492M in 2017 WAF Total Addressable Market WAF market growth from 306 million in 2013 to 500 million by 2018, with a CAGR* of 17.2% . - Gartner, Q4CY2013 - IDC, 2013 - Gartner WAF MQ 2014, F5 * Technavio report, titled, "Global Web Application Firewall (WAF) Market 2014-2018 " .

1.1 Purpose. This document describes the ordering guidance for the Cisco Secure Cloud Web Application Firewall (WAF) solution. Cisco Secure Cloud Web Application Firewall (WAF) is a Cisco Secure OEM solution based on Radware's Cloud WAF Service that provides a fully managed, cloud-based application firewall service.

Gen 3, 6.5 kV Gen 3, 900 V Gen 2, C2M Family 1.2 kV Gen 1, 1.2 kV Gen 3, 1.2 kV Scaling of State-of-Art Gen-3 SiC Power MOSFETs in R&D RCh/RON becomes larger for lower-V MOSFETs. For Gen-3 1200V MOSFET, RCh 40% of total RON. Future Prospective Reduce RCh/RON by: o Improving MOS INV o Higher packing density

gen-26 davar nanabhoy s practical book keeping & accountancy 12 07/07/1966 gen-27 ghatalia s v practical auditing 15 07/07/1966 gen-28 gupta rup ram advanced accounting 22.5 07/07/1966 gen-29 gupta rup ram auditing 12.5 07/07/1966 gen-30 gupta rup ram text book of auditing 7.5 07/07/1966 gen-31 gupta rup ram cost accounting 9 07/0

SPARC @ Oracle 16 x 2nd Gen cores 6MB L2 Cache 1.7 GHz 8 x 3 rd Gen Cores 4MB L3 Cache 3.0 GHz 16 x 3rd Gen Cores 8MB L3 Cache 3.6 GHz 12 x 3rd Gen 48MB L3 Cache 3.6 GHz 6 x 3 Gen Cores 48MB L3 Cache 3.6 GHz T3 T4 T5 M5 M6 S7 32 x 4th Gen Cores 64MB L3 Cache 4.1 GHz DAX1 M7 8 x 4th Gen Co

AXG Web Application Firewall WWW3 DNS Points to AXG WAF when Asked for WWWx HTTP Internet The ACE Web Application Firewall is a full reverse proxy In other words, you can have the DNS server point to the IP address of the WAF to represent the actual Web server At that point, the WAF accepts all requests destined to the Web

Web Application Firewall (WAF) Solution. The subscription renewal required is for one (1) year, renewable and payable annually for up to three (3) years. 1.5 KenTrade requires the following for its Web Application Firewalls (WAF): a) Renewal of annual license subscriptions including the manufacturer support.

For the EFIAP/d2 100 awards with 30 different works in 7 different countries For the EFIAP/d3 200 awards with 50 different works in 10 different countries 4.3. The candidate for an "EFIAP Level" distinction must submit: a) A complete application using forms prescribed by FIAP (which can be downloaded from FIAP’s website, see 9.1.). b) A number of photographs as indicated hereunder: These .