Skip to main content
Talk to SalesGet Started
Talk to Sales
Get Started

[SECURITY · WEB APPLICATION FIREWALL]

Stop attacks at the edge.Not your customers.

OWASP Top 10 protection for your dynamic sites and APIs - managed and custom rules, and a monitoring mode to tune before you block.

Talk to an engineerExplore the docs
Animation: users keep being served by their nearest Medianova edge location while attacks from outside break on the Medianova WAF shield over the edge they target, and never reach the origin behind its green shield. In Monitoring Only mode the same attacks are logged, not blocked, and travel on to the origin.
Edgesight · WAF Analytics

WHAT IT STOPS

Built on OWASP principles.

Rule-based filtering on every HTTP request between your users and your servers, against the OWASP Top 10 web vulnerabilities.

  • SQL injection

    Stop database commands smuggled in through forms, URLs and parameters.

  • Cross-site scripting (XSS)

    Block scripts injected into your pages to target your visitors.

  • Local file inclusion

    Block requests crafted to read files from your server.

  • Blacklisted IPs

    Filter traffic from IP addresses known to be malicious.

RULES

Managed rules, plus your own.

Both rule sets work together for layered protection.

  • Managed rules

    Constantly updated rulesets, maintained by Medianova’s Security Team.

  • Custom rules

    Define your own rules to block, allow or log specific requests.

    • Request method, client IP, request URI, user agent, referrer
    • Equals, contains or matches
    • Up to three conditions per rule

  • Rule priority

    Drag and drop your rules to set the order they are evaluated in.

ACTIONS

Block, allow or just log.

  • Block

    Reject the request with an error response.

  • Allow

    Let the request through to your origin.

  • Log only

    Record the event without blocking anything.

NO FALSE ALARMS

Watch first. Block when you’re sure.

Never switch managed rules off to silence one false positive - find the rule causing it and fix that one.

  1. 01 / 04

    Start in Monitoring Only

    Every request is logged and nothing is blocked, so you see what normal traffic looks like.

  2. 02 / 04

    Review the activity

    Spot legitimate requests a rule would have stopped, for example from trusted IPs.

  3. 03 / 04

    Refine the rule

    Narrow its field, operator or value, add an exception for trusted IPs, URIs or user agents, or set it to Log Only.

  4. 04 / 04

    Turn on Block

    When the false alerts stop, switch to full protection.

WAF ANALYTICS

See every attack.

Dashboards in the Medianova Control Panel, in both Monitoring Only and On mode, filterable by URL.

  • Attack histogram

    The number of attacks over time.

  • Threats

    Total threats detected, compared day over day and month over month.

  • Top client IPs

    Where malicious traffic comes from.

  • Top request URIs

    The endpoints attackers target most.

  • Top user agents

    The browsers and bots behind the requests.

  • Rule activity

    Which rules fired, how often and when they last did.

  • Activity log

    The last 300 requests with time, IP, URI, user agent and rule.

VISIBILITY

Alongside Edgesight.

WHERE IT RUNS

Built into Aksela.

WAF runs on Aksela’s dynamic CDN resources - your dynamic sites and APIs are accelerated and protected on the same edge.

MEDIANOVA SECURITY

One layer of many.

GET STARTED

On in five steps.

  1. 01 / 05

    Log in

    Open the Medianova Control Panel.

  2. 02 / 05

    Go to Security › WAF

    Find the WAF settings.

  3. 03 / 05

    Choose a resource

    Select your dynamic CDN resource.

  4. 04 / 05

    Pick a mode

    Start with Monitoring Only, or switch it On.

  5. 05 / 05

    Save

    Logs and metrics appear within a few minutes.

Stop attacks at the edge. Not your customers.

Talk to an engineer about your applications, your APIs and your rules.

Talk to an engineer