NGINX Web Application Firewall

What is NGINX Web Application Firewall?

What is NGINX Web Application Firewall?

Even when you understand security, it's hard to create secure applications, especially when working under the pressures so common in today's businesses. NGINX Web Application Firewall (WAF) protects sophisticated layer 7 counter-attacks applications that could otherwise lead systems to be hacked by attackers, loss of sensitive data, and downtime. NGINX WAF is based on widely used ModSecurity open source software.

Battle tested

Used by over one million websites, ModSecurity is the most trusted name in application security

Flexible

NGINX WAF is open source software that can be deployed in any environment - bare metal, public cloud, private cloud, hybrid cloud, hybrid machines, virtual machines and containers

Economically viable

PCI compliance for a fraction of the cost of hardware WAFs

PRINCIAPAIS RESOURCES

Detect and stop a wide variety of Layer 7 attacks:

• SQL Injection (SQLi), Site-To-Site Script (XSS), and Local File Include (LFI), which together account for more than 90% of known Layer 7 attacks
• Site-to-site request spoofing (CSRF), Remote File Inclusion (RFI), Remote Code Execution (RCE), and HTTP Protocol Violations
• Other common attack vectors, detected by their own custom regex-based rules

IP reputation

• Automatically block traffic from known malicious IP addresses:
• Browse IP addresses in the Project Honey Pot database in real time and deny access to blacklisted users
• Search cache results for up to 24 hours to improve performance
• Set up your own pot of malicious IP addresses and contribute to the community

Audit log

• Get detailed logs for auditing and visibility:
• Detailed information about all transactions, including requests, responses, and details about which rules have been activated
• Remote syslogging for centralized and file analysis

System requirements

Works with Microsoft Azure, Amazon Web Services, Google Cloud Plataform, Ubuntu, among others.

64-bit O.S