Web Application Firewall (WAF)

FortiWeb-based service for tracking and blocking known and new attacks on the web application.

Web Application Firewall (WAF)

Ready-made service that requires no adjustments and administration.

Russian service based on our own data centers.

24/7 monitoring and technical support.

When you need WAF

Protection from attacks from OWASP TOP-10, DDoS-attacks, vulnerabilities exploitation.

Protection for corporate application: mail, cloud, virtual desktops.

Protection of users’ funds in private accounts of internet-shops, bonuses.

Why WAF service is beneficial:

  • Costs reduction due service model: no expenses for buying, development, configuration of WAF.
  • Your personnel’s load decrease: service will be administered by DataLine qualified experts.
  • Conformance to  IS requirements: meeting all regulations and requirements of PCI DSS (WAF service is cerified).

What you get:
  • protection your web application from hacker attacks,
  • regular scanning of your application and vulnerability analysis,
  • detection errors in the business logic,
  • PCI DSS compliance (certified WAF service),
  • 24/7 monitoring by information security specialists and fast updating of security rules,
  • minimal impact on real users,
  • virtual patching,
  • clear and detailed reports on detected vulnerabilities.

How the service works

Scanning

We scan application through QUALYS for vulnerabilities, via the results we create the configuration of WAF security rules.

Configuration security rules on WAF

Place the application behind our WAF, analyze traffic and configure rules. Based on data from QUALYS report, we build new protection rules.

Anti-DDoS protection

From QRator Ingress network we assign IP-address for  redirection of your traffic. Service neutralize DDoS attacks and filters traffic.

Tracking of attacks in online mode

Via data from WAF we create in ELK the graphic plots with which we track unusual and slow attacks.

Monitoring

We monitor WAF operation in 24x7 mode, analyze traffic and detected vulnerabilities, configure and update security politics, send the reports if required.

How to connect to the service?

You provide us with the domain name and IP address of your application, and your contacts.

You add the provided IP address from our secure network to the DNS record.

We coordinate the protection rules with you.

From DataLine specialists, you get reports that include data about vulnerabilities and attacks.

You provide us with the domain name and IP address of your application, and your contacts.

You add the provided IP address from our secure network to the DNS record.

We coordinate the protection rules with you.

From DataLine specialists, you get reports that include data about vulnerabilities and attacks.

Why choose us?

Guaranteed SLA

Service availability 99.982 % and financial guarantees for non-observance.

Technical support

Administration and support via certified experts, 24x7.

Reliability

Service based on our own data centers of Tier III level in Russia.

Russian service

With Russian language speaking technical support and infrastructure in Moscow.