Fastly’s Security Research team has also added rules which protect your site and network from commonly known attacks: bad IP addresses, bad user agents, and known botnet command and control nodes. It also contains Adobe Commerce-specific rules developed by TrustWave SpiderLabs. The rule set in the WAF profile applied to your Adobe Commerce on cloud infrastructure production environment is based on the OWASP Top 10 Threat Protection rule set, which covers common exploits to web services. The WAF is tuned collectively for all domains under a single cloud account. If my Adobe Commerce on cloud infrastructure account manages sites on multiple domains, is the WAF profile tuned for each domain, or collectively for all domains? Does WAF comply with PCI DSS 6.6 requirements? The WAF service is available in Production and Staging environments. Yes, the cloud WAF service is included in your Adobe Commerce on cloud infrastructure subscription for both Adobe Commerce on cloud infrastructure Starter plan architecture and Adobe Commerce on cloud infrastructure Pro plan architecture plans at no additional cost. Is the WAF available for all cloud customers? Their high-performance, always-on WAF resides in each cache node across Fastly’s global delivery network. Fastly, an existing technology partner, provides the software and expertise. The WAF can block a wide variety of attacks, including SQL injection attacks, cross-site scripting attacks, data exfiltration attacks, and HTTP protocol violations.Īs a cloud-based service, the WAF requires no hardware or software to install or maintain.

It evaluates the GET and the POST traffic (HTTP API calls) and applies the rule set to determine which traffic to block. The WAF examines web and admin traffic to identify any suspicious activity.

Traffic that triggers any of the rules is blocked before it can damage your sites or network.Īdobe Commerce’s cloud WAF provides a WAF policy with a rule set designed to protect your Adobe Commerce web applications from a wide range of attacks. Web Application Firewalls (WAFs) prevent malicious traffic from entering sites and networks by filtering traffic against a set of security rules. Web Application Firewall (WAF) powered by Fastly: the FAQ How does Adobe Commerce’s managed cloud WAF (powered by Fastly) work?

What is web application firewall