Mark Kraynak mark at imperva.com
Thu Oct 8 10:19:58 EDT 2015

At the risk of being too commercial, I’m attaching a link to the Imperva blog where we announced our intention to offer IP reputation as a service for AWS WAF.  I think there is opportunity in the long term to do more, but for now the integration is focused on IP reputation.  If anyone would like to get more information, I’d be happy to discuss offline.


From: wasc-wafec [mailto:wasc-wafec-bounces at lists.webappsec.org] On Behalf Of Tony Turner
Sent: Thursday, October 08, 2015 5:16 AM
To: Christian Folini
Cc: wasc-wafec at lists.webappsec.org

I'm curious about slide 73 listing Imperva as a partner. (as well as Trend Micro and Alert Logic). Does that mean its Incapsula or SecureSphere providing WAF services? What's Imperva's role in the AWS WAF service?

On Thu, Oct 8, 2015 at 12:50 AM, Christian Folini <christian.folini at netnea.com<mailto:christian.folini at netnea.com>> wrote:
Hi there,

On Thu, Oct 08, 2015 at 03:23:59PM +1100, Christian Heinrich wrote:
> http://www.slideshare.net/AmazonWebServices/sec323-new-securing-web-applications-with-aws-waf
> are the slides of the WAF Product from Amazon Web Services:

Has anybody used this? It says it is easy to integrate, but the slides
makes it look awful to handle false positives.

I like the "pay by the number of rules you use" approach though.
That's a business model!


Christian Folini

For my part I believe in the forgiveness of sin and the redemption of
-- Adlai Stevenson

Tony Turner
OWASP Orlando Chapter Founder/Co-Leader
WAFEC Project Leader
STING Game Project Leader
tony.turner at owasp.org<mailto:tony.turner at owasp.org>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webappsec.org/pipermail/wasc-wafec_lists.webappsec.org/attachments/20151008/39a27d4b/attachment-0003.html>

More information about the wasc-wafec mailing list