Contact Us

Web Application Firewall

The many layers of web applications contain many potential vulnerabilities. Deploy the Web Application firewall and solve the risks of bad or malicious code. All inbound traffic is scanned, inspecting and protecting your applications, APIs, and mobile app backends

Web Application Firewall2021-11-04T17:11:40+00:00

Protect your websites and applications from advanced cyber threats 

3X as many businesses trust Barracuda’s Web Application Firewall to secure applications running in public cloud than the next 3 solutions combined. The solution has been developed and refined for 10+ years, and is Gartner-rated (Challenger in WAAP). This proven pedigree is why we partner with Barracuda to offer you this market-leading protection against data breaches and defacement attacks.

Web applications are a major vector for cyber criminals trying to infiltrate your network. Their complexity often means visibility is affected, which in turn makes it harder to map and mitigate. Especially when you’re also dealing with risks around Shadow IT. 

Protect against the 10 biggest website threats

Web applications offer rich pickings for cyber criminals. From gathering Personally Identifiable Information, to storing financial data, or enabling employees to login remotely. Such high rewards are why cyber criminals can afford to take their time to uncover potential vulnerabilities. The Web Application Firewall is when you can’t afford to take the risk that they’ll succeed.

  •  Defends against the 10 biggest website threats, including SQL injections, Cross-Site Scripting (XSS), Denial of Service (DoS) attacks, and bot infections. 
  • Offers client-side protection that automates configurations, reduces errors and frees up your resources. 
  • Server cloaking to stop potential leaks of information such as backend IP addresses, HTTP headers, error messages, return codes, server banners, and debug information. 

Protect APIs and mobile apps

You need modern applications to be interconnected. However, this exposes your business to any broken, exposed or hacked APIs. The Web Application Firewall protects against coding risks and Broken Object Level Authorisation (BOLA), and visibility risks from growing endpoints and app functionalities. The solution also guards against potential data leaks from multiple API requests.

  • The Web Application Firewall protects your entire attack surface, including REST APIs and API-based applications.  
  • XML protection secures REST and WSDL interfaces against schema and WSDL poisoning 
  • JSON protection scans payloads to ensure only legitimate requests are allowed through, while your API rulesets can be automatically created based on your API definition files

Identity & access controls

Data centre security teams are being challenged to rapidly deploy and secure new applications whilst maintaining control over access. Without reliable and easy-to-use access controls, businesses risk attackers gaining unauthorised access to application data, or even administrative controls.

  • Intercept user requests and enforces authentication, authorisation, and auditing on behalf of the protected applications.   
  • Integrations with AD, LDAP and RADIUS gives you granular controls over which data types users and groups can access 
  • Built-in application delivery module enables HTTP load balancing, content routing, caching, compression.

About Us

With over 25 years in the business telecoms industry and an unrivalled reputation of delivering excellent, personal customer service, Arrow is one of very few companies in the UK able to provide a full telecoms, IT and energy consultancy and service proposition.

Learn More

Resources

We’re here to deliver a seamless, stable, reliable experience that your organisation can’t live without. As a Microsoft Gold partner, with our own voice platform and 25 years’ experience in Telecoms and IT services we’re perfectly positioned to do just that.

FAQs

Why do I need a Web Application Firewall?2021-10-17T10:52:52+00:00

HTTP and HTTPS traffic is designed to traverse network firewalls. This traffic can contain command exploits that target vulnerabilities in web applications. The Barracuda Web Application Firewall screens input to web applications to block attacks that pass through network firewalls. 

How does the Web Application Firewall detect and block threats?2021-10-17T10:53:41+00:00

Acting as a full proxy, the Web Application Firewall inspects request traffic to detect and block inbound attacks while inspecting response traffic to prevent loss of sensitive data such as credit card and Social Security numbers.

What threats does the Web Application Firewall protect against?2021-10-17T10:54:22+00:00

The Web Application Firewall protects against all OWASP top 10 attacks, zero-day attacks, data leakage, and DDoS attacks

What is OWASP Top 10?2021-10-17T10:55:17+00:00

The OWASP Top 10 is a standard awareness document for developers and web application security, representing a broad consensus of the most critical security risks to web applications. This includes:

Broken Access Control

Cryptographic Failures

Injection

Insecure Design

Security Misconfiguration

Vulnerable and Outdated Components

Identification and Authentication Failures

Software and Data Integrity Failures

Security Logging and Monitoring Failures

Server-Side Request Forgery

What integrations does the Web Application Firewall support?2021-10-17T10:55:56+00:00

There are many popular third-party DevOps integrations, including Puppet, Chef, Ansible, Terraform, Azure ARM, AWS CloudFormation. Third-party scanning tool integrations include IBM AppScan, Rapid7, Immuniweb, HPE Security WebInspect.

Go to Top