Forum Discussion
spalande
Nacreous
NacreousServer Technology specific WAF policies
Hi WAF experts, What's your opinion on using server technology-specific WAF policies instead of using kind of generic or high/medium rated policy? what are the pros and cons of using server techn...
LidevNacreous
NacreousHi,
Pros :
- Granular protection
- Reduced false positives
- Better Performance
Cons :
- High maintenance requirements
- Risk of overlooking general threats and limited scope of protection
For me, best solution is to use server technology and a set of attack signatures for generic detection + Top10 OWAP Attack vector (SQLi, XSS...) to cover as much of the attack surface as possible.
Regards
