Set up Myra WAF¶
Note
The Web Application Firewall (WAF) can only be used if you have purchased it.
This option is greyed out if you have not purchased the WAF.
Note
To understand which threats the WAF has detected and to check whether the rules defined in the WAF correctly detect all threats, we recommend activating the access logs.
The Myra Web Application Firewall (WAF) is a cloud-based web application firewall that filters, monitors, and controls incoming and outgoing HTTP/S traffic for customer web applications. Unlike traditional firewalls that protect servers at the network level, the WAF safeguards applications at the content level, detecting and blocking malicious HTTP/S requests before they reach the customer infrastructure.
The WAF analyses and filters traffic in real time using standard Myra rule sets based on OWASP threat patterns, as well as custom rules defined by the customer. Rules support simple comparisons and regular expressions and can be scoped to specific domains or URL paths. When a rule matches, the WAF can block, allow, challenge, log, or modify the request.
The WAF protects customer web applications against common and application-specific vulnerabilities including SQL injection, cross-site scripting (XSS), and directory traversal. The solution can be deployed across on-premises data centers, hosting providers, and public and private cloud environments via a single management interface. There is no longer a need for multiple WAF solutions or separate management per environment.
Before you can use Myra WAF to protect your web applications, you must perform the following steps:
- ► Enabling WAF in the subdomain settings
- ► Copy Myra Tag
- ► If necessary, create additional WAF rules
- ► Check WAF rules and their detection
- ► Activate WAF