Forum Discussion

Sebastiansierra's avatar
Sebastiansierra
Icon for MVP rankMVP
Feb 23, 2023

Case of use of AWAF to protect APM

Hi Community, Today I would like to open this post to talk about the use of AWAF to protect APM, I know some cases of use for this integration but I would like to receive some suggestions based on ...
application delivery
PSFletchTheTek's avatar
PSFletchTheTek
Icon for Cumulonimbus rankCumulonimbus
Feb 23, 2023

I've also wondered this, I'm sure there is a very good reason to put APM infront of ASM/AWAF but you do loose a level of protection or visability on that apm webtop.

Could the process be swopped? AWAF then APM?
Or maybe a AWAF plug in for APM which can feed information back to the APM module to give you both levels of protection?

  • Sebastiansierra's avatar
    Sebastiansierra
    Icon for MVP rankMVP
    Feb 23, 2023

    Hi PSFletchTheTek,

    Yes, we can modify the behavior to process the first ASM module with a Virtual Server Layer and execute protections tan can be applied when the APM is executed first as brute force protection.