Comment on page

Web App Firewall (WAF)

Creating and Using a WAF
The creation of a Web Application Firewall (WAF) is a one-time process. Create a WAF in the public cloud Console, fetch the ID/ARN, and update the Plan in DuploCloud. Once updated, the WAF can be attached to the Load Balancer.

Creating a Web Application Firewall (WAF)

When you create a WAF in DuploCloud, an entry is added to the Web ACL. You use this entry in a later step to attach an ALB Load Balancer to your WAF.
  1. 1.
    In the DuploCloud Portal, navigate to Administrator -> Plans. The Plans page displays.
    Plans page with WAF tab
  2. 2.
    From the Name column, select the Plan you want to update.
  3. 3.
    Click the WAF tab.
  4. 4.
    Click Add. The Add WAF pane displays.
    Add WAF pane
  5. 5.
    In the Name field, type the name of your WAF.
  6. 6.
    In the WAF ARN field, enter the Amazon Resource Name (ARN).
  7. 7.
    Click Create.

Attaching the WAF to a Load Balancer

Only ALB Load Balancers can be attached to a WAF.
  1. 1.
    If you don't yet have an Application Load Balancer (ALB), create one.
  2. 2.
    In the Other Settings card, click Edit. The Other Load Balancer Settings pane displays.
    Other Load Balancer Settings for attaching a WAF (via the Web ACL field) to an ALB Load Balancer
  3. 3.
    From the Web ACL list box, select a WAF that you have added to DuploCloud.
  4. 4.
    Complete the other required fields in the Other Load Balancer Settings pane.
  5. 5.
    Click Update.

Analyzing inbound traffic with the WAF dashboard

DuploCloud also provides a WAF Dashboard through which you can analyze the traffic that is coming in and the requests that are blocked. The Dashboard can be accessed from the left navigation panel: Security > WAF.
WAF Dashboard