General WAF Configuration
Sense Defence WAF is a layered WAF engine which prioritises and detects malicious attacks in different ways.
General Settings
In this section, WAF can be enabled/disabled 'globally' or enable/disable WAF engines individually. Customers can choose which WAF engine is more appropriate for their use.
There are other features which users can customise according to the requirements.
Sense Defence WAF
- Enable/Disable
- WAF Action: Set the WAF actions - Detect/Block/Challenge
Machine Learning WAF
- WAF Sensitivity - Set the AI WAF sensitivity to desired level.
- WAF Action - Set the WAF actions - Detect/Block/Challenge
OWASP Signature WAF
- OWASP Anomaly Score: Enable/Disable
- Blocking Early
- WAF Action - Set the WAF actions - Detect/Block/Challenge
- OWASP Paranoia Level
- WAF Level
- Anomaly Score Selection
Related Articles
Onboarding a Site to Sense Defence WAF
Sense Defence’s Web Application Firewall (WAF) offers both security and acceleration at the web application level. To begin the process of securing and speeding up a web application, a “site” must be added to a Sense Defence customer organisation. ...
Onboarding Site to Sense Defence WAF
Sense Defence’s Web Application Firewall (WAF) offers both security and acceleration at the web application level. To begin the process of securing and speeding up a web application, a “site” must be added to a Sense Defence customer organisation. ...
SSL Configuration for Websites
It is very important to enable SSL certificate for security and performance. Sense Defence made it easy to deploy SSL certificates through WAF dashboard. Follow the steps below to enable SSL/TLS protection for your application. Select SSL Settings ...
Recommended SSL Configuration
By default, all sites onboarded to Sense Defence are enabled with standard recommended security standards. There are no additional configurations needed to get A+ rating in Qualys SSL labs. Howevere it is recommended to configure HSTS settings as ...
Sense Defence OWASP Core Rule Early Blocking
OWASP released early blocking feature for its core rules sets in Sprint 2022 and Sense defence adapted the changes immediately on its core rules selections. This feature is available for all users - including our community edition customers at free ...