Detections
Analytics
CSCv7|18.10
Title
Deploy Web Application Firewalls (WAFs)Description
Protect web applications by deploying web application firewalls (WAFs) that inspect all traffic flowing to the web application for common web application attacks. For applications that are not web-based, specific application firewalls should be deployed if such tools are available for the given application type. If the traffic is encrypted, the device should either sit behind the encryption or be capable of decrypting the traffic prior to analysis. If neither option is appropriate, a host-based web application firewall should be deployed.Reference Item Details
Reference: CIS Critical Security Controls v7
Category: Application Software Security
Audit Items
View all Reference Audit Items