Configuring the Web App Firewall

• Enabling the Web App Firewall

• The Web App Firewall Wizard

• Manual Configuration

• Manual Configuration By Using the Configuration Utility

• Manual Configuration By Using the Command Line Interface

Signatures

• Manually Configuring the Signatures Feature

• Adding or Removing a Signatures Object

• Configuring or Modifying a Signatures Object

• Protecting JSON Applications using Signatures

• Updating a Signatures Object

• Snort rule integration

• Exporting a Signatures Object to a File

• The Signatures Editor

  • To add a signature rule category

  • Signature Rule Patterns

  • To Import and Merge Rules

• Signature Updates in High-Availability Deployment and Build Upgrades

Top-Level Protections

• HTML Cross-Site Scripting Check

• HTML SQL Injection Checks

• HTML Command Injection Protection

• XML External Entity Protection

• Buffer Overflow Check

• Cookie Consistency Check

• Web App Firewall Support for Google Web Toolkit

Data Leak Prevention Checks

• Credit Card Check

• Safe Object Check

Advanced Form Protection Checks

• Field Formats Check

• Form Field Consistency Check

• CSRF Form Tagging Check

• Managing CSRF Form Tagging Check Relaxations

URL Protection Checks

• Start URL Check

• Deny URL Check

XML Protection Checks

• XML Format Check

• XML Denial-of-Service Check

• XML Cross-Site Scripting Check

• XML SQL Injection Check

• XML Attachment Check

• Web Services Interoperability Check

• XML Message Validation Check

• XML SOAP Fault Filtering Check

JSON Protection Checks

• JSON DOS Protection

• JSON SQL Protection

• JSON XSS Protection

Profiles

• Creating Web App Firewall Profiles

• Enforce HTTP RFC compliance

• Configuring Web App Firewall Profiles

• Changing an Web App Firewall Profile Type

• Web App Firewall Profile Settings

• Detailed troubleshooting with WAF logs

• File Upload Protection

• Exporting and Importing an Web App Firewall Profile

• Configuring and Using the Learning Feature

• Dynamic Profiling

• Supplemental Information about Profiles

• Cookie Hijacking Protection

Policies

• Firewall Policies

  • Creating and Configuring Web App Firewall Policies

  • Binding Web App Firewall Policies

  • Viewing a Firewall Policy's Bindings

  • Supplemental Information about Web App Firewall Policies

• Auditing Policies

Imports

• Importing and Exporting Files

Global Configuration

• Engine Settings

• Confidential Fields

• Field Types

• XML Content Types

• JSON Content Types

Appendices

• PCRE Character Encoding Format

• Whitehat WASC Signature Types for WAF Use

• Streaming Support for Request Processing

• Trace HTML Requests with Security Logs

• Web App Firewall Support for Cluster Configurations

Debugging and Troubleshooting

• High CPU

• Memory

• Large File Upload Failure

• Learning

• Signatures

• Trace Log

• Miscellaneous

• References

Signatures Alert Articles

• How to receive notification for signature updates

• Signature update version 27

• Signature update version 28

• Signature update version 29

• Signature update version 30

• Signature update version 32

• Signature update version 33

• Signature update version 34

• Signature update version 35

• Signature update version 36

• Signature update version 37

• Signature update version 38

• Signature update version 39

• Signature update version 40

• Signature update version 41

• Signature update version 42

• Signature update version 43

• Signature update version 44

• Signature update version 45

• Signature update version 46

• Signature update version 47

• Signature update version 48

• Signature update version 49