Home How to Blog Kona Web Application Firewall

Kona Web Application Firewall

160
0

With the rapid evolution of web applications, developers, IT teams, and security teams are struggling to keep up with the proliferation of new web security threats. The safest security is a Web Application Firewall (WAF).

Kona Web Application Firewall

Kona Web Application Firewall offers always-on, highly scalable security against web application attacks such as SQL injections, cross-site scripting, and remote file inclusion – all while maintaining application efficiency. Kona Web Application Firewall scales automatically to protect against major application attacks and frees businesses from the complexities and investment in dedicated hardware by leveraging the globally distributed Akamai Intelligent PlatformTM. The Threat Intelligence Team at Akamai is constantly refining Kona WAF rules for established website attacks and responding to new threats as they arise.

How Does Kona Web Application Firewall Work?

Kona Web Application Firewall inspects any HTTP and HTTPS request before serving it, detecting and blocking web security threats before they hit the data centre. It is globally distributed through the Akamai Intelligent PlatformTM. It enables businesses to tailor the security perimeter to each online environment under protection and works by implementing network- and application-layer controls.

Inorder to understand how does kona WAF works, everyone should know about WAF and it works.

A web application firewall is installed in front of web applications and analyses bi-directional web-based (HTTP) traffic, checking all GET and POST requests for malicious content and blocking it.

A WAF is an application protection mechanism that is situated between a web client and a web server, as opposed to a traditional firewall, which only acts as a safety gate between servers.

The majority of malicious attacks are automated. These threats are difficult to identify because they are often programmed to imitate human traffic and therefore go undetected.

A WAF thoroughly examines every request and response for all popular types of web traffic. This inspection assists the WAF in identifying and blocking threats before they reach the server.

KONA Web Application Firewall – Akamai’s Cloud WAF is now available

The Kona Web Application Firewall from Akamai is a cloud platform that effectively defends against these threats. It provides an always-on, highly scalable application firewall that protects against emerging web security threats while maintaining application performance.

Kona Web Application Firewall inspects every HTTP and HTTPS request before serving it as an embedded mechanism within the Akamai Intelligent PlatformTM, detecting and preventing web security threats before they hit the data centre. The Threat Intelligence Team at Akamai is constantly refining firewall rules to block established attacks and react to new threats as they arise. Adaptive rate controls defend against application-layer denial of service attacks automatically, while network-layer controls identify and implement IP whitelists and blacklists to protect the website by limiting requests from unique IP addresses.

Kona WAF is deployed at the network’s edge rather than in the centre. This means it can detect and mitigate suspicious traffic without impacting the origin server’s efficiency or availability.

What Are the Advantages of a Cloud WAF?

Using a cloud WAF offers a flexible network that can be accessed internationally, assisting in the protection of massive web applications around the world against numerous threats.

A cloud web app firewall, such as KONA WAF, allows users to:

  1. With a WAF that can scale to defend against the most powerful DoS and DDoS attacks, you can reduce the risk of downtime, data theft, and security breaches.
  2. Because of Akamai’s global architecture, you can ensure high performance even during attacks.
  3. With the help of Akamai’s Threat Intelligence Team, you can defend against new and emerging threats.
  4. Reduce cloud security costs by avoiding the need for expensive dedicated hardware.

What exactly is a Managed Firewall?

A WAF can either be managed or unmanaged. Dedicated security services for controlled firewalls assist in determining which traffic is potentially damaging and preventing it from ever accessing your server. The KONA WAF provides both controlled and unmanaged options, with the latter being best suited to practitioners with specialised knowledge of internet security.

Kona WAF’s Major Capabilities

Kona WAF offers comprehensive protection against application-layer attacks.

  1. By tracking and regulating the rate of requests against applications, adaptive rate controls automatically defend against application-layer DDoS and other volumetric attacks.
  2. Application-layer controls include pre-defined, programmable WAF rules that regulate Request Limit Violations, Protocol Violations, HTTP Policy Violations, and other issues.
  3. Network-layer controls automatically redirect network-layer DDoS attacks at the network edge, as well as identify and implement IP whitelists and blacklists to limit requests from specific IP addresses or geographical regions.
  4. Security monitor gives administrators real-time insight into security incidents and allows them to drill down into attack warnings.
  5. You can use logging functionality to combine WAF and event logs with security information and event management to improve the threat posture awareness.

Kona Site Defender WAF Features

According cisco, 

Kona WAF Functionalities are listed below

  1. Protection against Generic attacks
  2. Protection against generic Network based attacks
  3. Protection against Network layer DOS attacks
  4. Protection against Application layer DoS attacks
  5. Protection against outbound data theft
  6. Protection against policy evasion attacks
  7. Control over file uploads
  8. Support multiple deployment modes
  9. Protocol support
  10. SSL offloading support
  11. Application Load balancing
  12. Protection against Known exploits

Kona WAF Integration with

  1. LDAP/RADIUS/AD
  2. Support for Certificates
  3. Application security testing tools (SAST, DAST, IAST)
  4. SIEM
  5. IAM
  6. Vulnerability Management tools