This web application firewall deploys on the award-winning LoadMaster load balancer. LoadMaster supplies a WAF based on the industry-leading ModSecurity engine, backed by open-source rule sets. What is WAF with Progress Kemp LoadMaster? Using lists of knock attack methods, plus anomaly detection, the web applicationįirewall can deny access to web servers when it detects malicious activity.

It can decrypt HTTPS traffic and inspect the data they contain. Traditional firewalls don’t stop encrypted HTTPS traffic as they have no visibility of the content within.Ī web application firewall operates at Layer 7 of the network stack between standard firewalls and web servers. What is a Web Application Firewall (WAF)?Ī web application firewall complements and enhances traditional firewall security protection. A LoadMaster IDS/IPS, rate-limiting, SSL/TLS encryption, authentication, and SSO, in a package that simplifies customization and scales across any environment. With granular per-application event logging, in-UI statistic visualization, and false-positive analysis with rich telemetry to third-party SIEMs, Kemp LoadMaster provides comprehensive visibility of running applications.Īs part of your network infrastructure, the WAF helps deliver in-depth defense for your web servers, website, and applications from the ever-changing threat landscape.

Kemp WAF can also help meet PCI-DSS compliance and data loss prevention (DLP) compliance requirements. The protection covers known web attacks and prevents specific traffic patterns from reaching your applications - without changing your application or infrastructure. Using a combination of rule types, you can protect all your applications from within Progress Kemp LoadMaster. Kemp’s WAF lets you create per-application security profiles to enforce source location-level filtering, adopt pre-integrated rulesets for common attack vectors, and custom security rules support. Kemp’s Web Application Firewall (WAF) helps to protect your custom and off-the-shelf applications from common vulnerabilities, such as SQL injection and cross-site scripting (XSS). In-depth defense for your web servers, website, and applications

Application firewall