11-25-2019, 10:07 AM
Hi. In order to pass certain web application security tests without remarks, some (e.g. those that check compliance against the Payment Card Industry Data Security Standard) require a Web Application Firewall (WAF) to be present between the clients and the web application server. I have no experience with this, so here are some questions:
1. Is this a reasonable requirement, or does IntraWeb have built-in security that protects against the same things as an external WAF?
2. Does anyone have experience with using a WAF in front of one or more IntraWeb web applications? Any issues you can run into?
3. My understanding is that there are hardware, software and cloud based solutions for WAF. Any recommendations on which type to choose? Any particular product/service that you can recommend?
Feedback on this would be much appreciated!
Best regards
Magnus Oskarsson
1. Is this a reasonable requirement, or does IntraWeb have built-in security that protects against the same things as an external WAF?
2. Does anyone have experience with using a WAF in front of one or more IntraWeb web applications? Any issues you can run into?
3. My understanding is that there are hardware, software and cloud based solutions for WAF. Any recommendations on which type to choose? Any particular product/service that you can recommend?
Feedback on this would be much appreciated!
Best regards
Magnus Oskarsson