From the course: CCSP Cert Prep: 4 Cloud Application Security

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Web application firewalls

Web application firewalls

- [Instructor] You're probably already familiar with the purpose of a network firewall. These devices sit in front of a network and inspect all of the connections entering and leaving that protected network. They compare those connection attempts to a set of rules and then decide which connections are allowed to complete and which must be blocked. Web application firewalls, or WAFs, serve a similar purpose, but at a higher layer of the stack. They inspect HTTP requests made to a web server and watch for any signs of a potential attack occurring against the application itself. Potentially malicious activity is blocked before it even reaches the web server. The web application firewall sits in front of one or more web servers and receives all of the HTTP and HTTPS requests intended for those servers. It then screens these requests against its signatures of known attacks and evaluates them in light of the user's behavior and…

Contents