MONITORAPP Managed Rules for AWS WAF – AIAssist CyberThreat IPset

AIAssist Managed Rules – CyberThreat IPset provides categorized IP address groups (IP sets) that are known to be dangerous, helping AWS WAF defend against a wide range of threats, including IPs associated with high-risk attackers, DDoS botnets, command-and-control (C&C) servers, Tor exit nodes, various proxy services, and more. These IP sets enhance comprehensive protection for web applications and APIs by enabling proactive blocking of malicious and high-risk traffic. IP reputation feed is continuously updated through MONITORAPP’s cyber threat intelligence (CTI) platform, AILabs, which leverages AI and machine learning to collect, analyze, and process large volumes of threat data. The latest threat intelligence is automatically delivered to the AIAssist Managed Rules console, enabling automated IP set updates and ensuring up-to-date IP-based protection with no manual management required. As new vulnerabilities are discovered and as threat landscapes evolve, rules are dynamically adjusted to help customers operate WAF policies efficiently without the burden of designing and maintaining complex rulesets.

Main Features:

• Real-time Log Analysis and Monitoring: Real-time log collection and analysis with WAF security events visualized through an intuitive dashboard
• Automated Rule Management: Centralized rule management from a single console with automatic rule updates
• False Positive Handling: Identification of false positives through log analysis and customer support via the Support Center
• Easy Deployment: No additional installation or DNS changes required; seamless integration via IAM role configuration and Web ACLs