Security


Web Application Firewall


Web Application Firewall

WAF is a cloud firewall service that protects core website data and safeguards the security and availability of your site.

Based on powerful Big Data cloud capabilities and underlying security, WAF provides protection against web-based attacks, including SQL injections, XSS, Malicious BOT, command execution vulnerabilities, and other common web attacks.

Customer Testimonials

"Web Application Firewall protects our websites from thousands of web application attacks each day, protecting our core online assets."

 

Benefits

1. Stability and Speed

  • Easy Deployment: No need to install additional software or to deploy extra hardware. You can access the product and secure your website within minutes

  • Shorter Response Time: Extremely short response time (milliseconds) for user requests

  • Improved Monitoring and Service Systems: Offers 24/7 network-wide smart monitoring and scheduling based on service quality

2. Defense Capabilities

  • Centrally Defined Protection Rules: Nearly 1,000 protection rules, updated each day across all web applications by a dedicated defense team in order to protect from false positive rates

  • Patch Synchronization: Offers 0-day web vulnerability patches synchronized globally within 24 hours

  • Superior Defense: Comprehensive website security protection through precise access controls to provide powerful defense against web/flood attacks

3. Big Data Security Analysis

  • Security Protection: Protects thousands of data sensitive websites against millions of web attacks

  • Global Synchronization: Collaborative defense captures new threats and globally synchronizes protection rules

  • Big Data Learning Models: WAF utilizes a big data learning model to reduce the rate of false positives

4. Visibility

  • Real-time Metrics of Web Requests: Monitors requests that match your filter criteria and provides real-time metrics for improved visibility of your web traffic, which you can create using new rules and alerts

5. Cost-effective

  • Monthly Package: Offers monthly subscription with different package versions and feature specifications that you can select depending on your requirements

 

Product Details

Alibaba Cloud Web Application Firewall (WAF) is a SaaS-based web application security service which detects illegal web requests through its built-in security strategy. As a cloud firewall service WAF modifies your website’s DNS records, so that all requests through WAF are detected in order to direct safe traffic to the site server and prohibit attacks from reaching the server.

WAF also filters out large numbers of malicious access attempts and alleviates the performance impact of HTTP/HTTPS flood attacks on servers.