Web Application Firewall (WAF) - protection for your website
More security for your website - completely automatically
Your website is exposed to attacks around the clock.
Automated bots and targeted hacker attacks attempt to exploit security gaps, read data or manipulate content.
With our Web Application Firewall (WAF), you are reliably protected - without any additional effort on your part!
What is a web application firewall?
he Web Application Firewall (WAF) works like a security filter in front of your website:
- Every request to your website is checked
- Suspicious access is detected automatically
- Attacks are blocked before they cause any damage
This prevents malicious requests from reaching your TYPO3 application in the first place.
Which attacks are prevented?
Our WAF protects your website against, among other things:
- Manipulation of forms (e.g. login or contact forms)
- Attempts to read or change data
- Automated bot attacks
- Malicious scripts and code injections
In short: typical attacks that occur thousands of times a day on websites.
Our monitoring system shows the overload
The hosting plan Cloud POWER of the customer offers 8 CPU cores and 24 GB RAM. Suddenly, all CPU cores are 100% utilized [1]. The website loads much more slowly and occasionally displays the error 503 - overload.
The other customers on this server do not notice anything - the operating system CloudLinux, especially for hosting, only limits the affected hosting package.
How can the attack be warded off with the WAF?
An analysis of the log files shows the type of attack: the search function on the website is repeatedly accessed from numerous IP addresses. Complex search filters are used in an attempt to maximize the load on the server. Allegedly, the requests come from Google - presumably to prevent blocking. Only the IP addresses do not match Google, and a search engine does not usually use the search function on a website.
The web application firewall from Imunify360 offers dynamic adjustments to the filter rules and learns from the attack behavior. You can also create your own rules. We have created a new rule tailored to the attack pattern. At 18:07, the rule was activated and the CPU load dropped noticeably [2].
But the attackers noticed this and changed the pattern. The CPU load was back to 100%. So we activated another rule at 18:24 [3]. Shortly afterwards, the attack changed again, only a third rule fended it off permanently from 18:40 [4]. The three new rules were then rolled out to all servers so that they are also protected against these patterns.
Costs for the customer: none - the web application firewall is included in all hosting packages.
Why a WAF is indispensable today
Many attacks today are automated and specifically target known vulnerabilities.
Even regularly maintained websites are affected.
A web application firewall is therefore an important additional layer of protection that actively secures your website.
Let us advise you now without obligation or start directly with our secure hosting.
This page contains automatically translated content.