Managed rules for AWS Web Application Firewall
Managed rules for AWS WAF are designed to help you spend less time writing firewall rules and more time building applications.
Managed rules for AWS Web Application Firewall (WAF) are a set of rules written, curated and managed by AWS Marketplace Sellers that can be easily deployed in front of your web applications running on AWS Application Load Balancers or Amazon CloudFront.
With these managed rules, you can quickly get started and protect your web application or APIs against common threats like the OWASP Top 10 security risks, threats specific to Content Management Systems (CMS) like WordPress or Joomla, or even emerging Common Vulnerabilities and Exposures (CVE) without having to manage infrastructure.
Benefits
Rules managed by security experts
Managed rules are written by security experts who have extensive and up-to-date knowledge of threats and vulnerabilities. Rules are written based on threats observed across many customers. AWS WAF Managed rules are automatically updated by AWS Sellers as new vulnerabilities and bad actors emerge. Managed rules sellers create rules using a combination of security engineers on staff, automated traffic analysis and threat intelligence databases.
Easy to get started
Managed rules for AWS WAF give you a set of pre-configured rules written and managed by AWS Marketplace Sellers, allowing you to quickly get started with AWS WAF rules for your application. You can simply subscribe to Managed rules via the AWS Marketplace and then use the AWS WAF console to specify which resources to protect. All rules are deployed on the AWS WAF managed infrastructure.
Choice of protections
With managed rules you get a wide selection of protections from security experts and AWS Marketplace Sellers. You can choose from a variety of widely applicable protections like IP reputation lists and OWASP Top 10 protections, or choose from platform-specific rules like WordPress or Joomla rules. With each managed rules product, you get access to unique expertise and proprietary analysis from these security sellers.
Pay as you go
You can subscribe to managed rules with a few clicks and pay only for what you use, without having to sign up for any expensive professional services. Managed rules are automatically updated, and there are no contracts or subscription commitments. managed rules are charged by the hour.
Enabling managed rules on AWS WAF is simple
Go to AWS Marketplace or to the AWS WAF Console
Discover and subscribe to your managed rules
Associate the rules with your AWS WAF web ACL
Meet the managed rules sellers
HighSecurity OWASP Set
Cyber Security Cloud Managed Rules are designed to mitigate and minimize vulnerabilities, including all those on OWASP Top 10 Threats list. With the HighSecurity OWASP Set, you can start protecting your web applications right away with a low false-positive rate and a higher defense capability. Learn more
Bot protection rules
Bot Protections Rules is a partner managed rule group for AWS WAF that stops a broad range of malicious bots activities such as vulnerability scanners, web scrapers, DDoS tools, and forum spam tools. Learn more
Web exploits OWASP rules
F5 Web Exploits OWASP Rules for AWS WAF, provides protection against web attacks that are part of the OWASP Top 10, such as: SQLi, XSS, command injection, No-SQLi injection, path traversal, and predictable resource. Learn more
Common Vulnerabilities and Exposures (CVE)
CVE Rules for AWS WAF provides protection for high profile CVEs targeting the following systems: Apache, Apache Struts, Bash, Elasticsearch, IIS, JBoss, JSP, Java, Joomla, MySQL, Node.js, PHP, PHPMyAdmin, Perl, Ruby On Rails, and WordPress. Learn more
API attacks
Protects against API attacks, web attacks (such as XML external entity attacks) and server side request forgery. The rule set includes support for XML and JSON payloads, and common web API frameworks. Learn more
General and known exploits rule group
Fortinet WAF RuleGroups are based on the FortiWeb web application firewall security service signatures, and are updated on a regular basis to include the latest threat information from FortiGuard Labs. The General and Known Exploits RuleGroup detects common and advanced OWASP Top 10 threats including numerous Injection attacks, URL Redirects, HTTP Response Splitting, Database Disclosure vulnerabilities and other Common Vulnerabilities and Exposures (CVEs). Please see our other RuleGroups for additional protections. Learn more
Malicious bots
Fortinet WAF RuleGroups are based on the FortiWeb web application firewall security service signatures, and are updated on a regular basis to include the latest threat information from FortiGuard Labs. The Malicious Bots RuleGroup analyzes requests and blocks known content scrapers, spiders looking for vulnerabilities, and other unwanted automated clients that OWASP has identified as risks to web applications. Please see our other RuleGroups for additional protections. Learn more
SQLi/XSS
Complete OWASP top 10 rulegroup
Fortinet WAF RuleGroups are based on the FortiWeb web application firewall security service signatures, and are updated on a regular basis to include the latest threat information from FortiGuard Labs. The Complete OWASP Top 10 RuleGroup combines Fortinet’s other AWS WAF RuleGroups into one comprehensive package that includes the SQLi/XSS, General and Known Exploits, and Malicious Bots RuleGroups. Learn more
API Gateway
IP reputation on AWS WAF
Imperva's Managed Rules for IP Reputation allows you to take a proactive approach to security by providing an extensive IP whitelist/blacklist which is regularly monitored and updated. Imperva's reputation feed leverages crowd-sourcing from aggregated attack data to update its list with newly detected malicious sources. Learn more
WordPress protection on AWS WAF
Use this RuleGroup to protect WebServers including the Apache Suite (Apache Httpd, Apache Struts, Apache Tomcat) and Nginx from known vulnerabilities and to help meet PCI DSS requirements. Trend Microdelivers proactive global threat intelligence against zero-hour threats to help ensure that you are protected. Trend Micro integrates with key AWS Services and offers additional Amazon EC2 protection using Trend Micro Deep Security. Trend Micro’s Managed Rules for AWS WAF are designed to further augment the protection AWS WAF already offers for your applications and data in the cloud. Learn more
Content Management System (CMS)
Use this RuleGroup to protect common CMS and EMS including WordPress, Joomla and Drupal from known vulnerabilities and to help meet PCI DSS requirements. Trend Micro delivers proactive global threat intelligence against zero-hour threats to help ensure that you are protected. Trend Micro integrates with key AWS Services and offers EC2 protection using Deep Security for AWS. Trend Micro’s Managed Rules for AWS WAF are designed to further augment the protection AWS WAF already offers for your applications and data in the cloud. Learn more
ModSecurity Virtual Patching
Select Trustwave SpiderLabs ModSecurity virtual patches to provide additional support for your web applications running AWS WAF. As the threat landscape evolves, Trustwave SpiderLabs will continue to provide new virtual patches. The virtual patches will allow you to reduce the development costs of your web applications by enabling you to prevent vulnerabilities from being exposed to the internet. Contains hundreds of virtual patches to protect technologies such as BigTree CMS, couponPHP CMS, and DotCMS. Learn more
CMS Virtual Patches
Select Trustwave SpiderLabs ModSecurity virtual patches to provide additional support for your web applications running AWS WAF. As the threat landscape evolves, Trustwave SpiderLabs will continue to provide new virtual patches. The virtual patches will allow you to reduce the development costs of your web applications by enabling you to prevent vulnerabilities from being exposed to the internet. Our Content Management System (CMS) virtual patches package, provides critical patches to protect your customers and your reputation. It contains hundreds of virtual patches to protect CMS platforms such as Drupal, Joomla, and WordPress. Learn more
We're here to help you get started with AWS Marketplace. Ask for or give advice on the AWS Marketplace discussion forum.
We're here to help you get started with AWS Marketplace. Ask for or give advice on the AWS Marketplace discussion forum.
