eCloudX WAF

the eCloudX WAF provides protection against the OWASP TOP 10 web vulnerabilities, including SQL injections, XSS, and control over file uploads/downloads. It also features IP control based on Black/White lists, Layer 7 DDoS mitigation, automated web scraping prevention, scanner detection, and malicious bot mitigation through its learning-based analytical algorithms. Furthermore, it analyzes outbound web traffic to mask or control sensitive information, thereby preventing sensitive data leaks.

Web Security Features

• Provides control against the OWASP Top 10 vulnerabilities.
• Offers protection against web attacks based on Internet Protocol version 4 (IPv4) and version 6 (IPv6).
• Provides mitigation features for various HTTP(S)-based Denial of Service (DoS) attacks.
• Includes functionality to prevent sensitive data leakage.
• Controls the upload and download of malicious files.
• Identifies and manages bots.
• Utilizes a threat database to control IPs associated with malware distribution.
• Provides control over abnormal requests and responses through HTTP(S) protocol analysis.
• Offers method control for Uniform Resource Locators (URLs).
• Mitigates brute force attacks.
• Supports IP access control through whitelisting and blacklisting.
• Provides country-specific IP access control.
• Delivers a quantitative web security threat index based on scoring.
• Controls web attacks through parameter analysis.
• Offers CAPTCHA authentication functionality.
• Monitors and controls client IPs using X-Forwarded-For headers.

Security Management Features

• Provides two-factor authentication (2FA) for the administrator web console.
• Offers conversion capabilities for various Secure Sockets Layer (SSL) certificate types (e.g., Java KeyStore (JKS), Public Key Cryptography Standards (PKCS #12)).
• Provides alerts for SSL certificate expiration before validity ends.
• Manages roles and permissions for individual administrator accounts.
• Facilitates integrated management of multiple web firewalls (three or more).
• Enables real-time policy synchronization across grouped systems.
• Allows differentiated policy management for each domain.
• Provides status alerts for the web firewall through self-checking mechanisms.
• Includes policy management features (backup and restore).
• Offers REST API functionality.
• Provides a browser-based (Chrome, Edge, Firefox) administrator interface (Graphical User Interface) with two-factor authentication.

Interoperability Features

• Integrates with Simple Network Management Protocol (SNMP) systems.
• Integrates with SYSLOG systems.
• Provides email alerts through self-checking mechanisms.
• Offers functionality to decrypt encrypted web traffic for integration with other systems.