Fundamentals

What a WAF is, security models and the building blocks of TR7 WAF.

• What is a WAF and what does it do?WAF-01-001
• I already have a network firewall; why would I also need a WAF?WAF-01-002
• What is the difference between IPS/IDS and a WAF?WAF-01-003
• My application's code was written securely; is a WAF still necessary?WAF-01-004
• Which attacks does TR7 WAF protect against?WAF-01-005
• Which vService types does TR7 WAF work with; can I use it on an L7 TCP or Network vService?WAF-01-006
• Can the WAF see the content of HTTPS traffic; what is required for that?WAF-01-007
• What is the difference between the negative security model (signature scanning) and the positive security model?WAF-01-008
• What is TR7's hybrid security model; how do the two models work together?WAF-01-009
• Which stages does a request go through inside TR7 WAF?WAF-01-010
• What are the basic building blocks of TR7 WAF (WAF Mode, Virtual Host Group, Page Types, Any Paths, Check Fields, Signature)?WAF-01-011
• Which decisions does the WAF make for a request; what do Action in Event Logs and Verdict in Debug Mode Logs mean?WAF-01-012
• Can TR7 WAF catch a zero-day attack without a signature?WAF-01-013