iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
A web application firewall (WAF) inspects HTTP and HTTPS requests sent to protected web resources and applies configured rules to decide what happens to them. It can help filter unwanted traffic, but it is not a guarantee of security: its protection depends on the rules, the request details it examines, and how the firewall is deployed relative to the application.
What is a web application firewall?
A WAF is a security control for web traffic. Amazon Web Services describes AWS WAF as a service that lets customers monitor HTTP and HTTPS requests forwarded to protected application resources and control access to content. In AWS, examples of those resources include CloudFront distributions, API Gateway REST APIs, Application Load Balancers, and AppSync GraphQL APIs. Other WAF products may work differently.
A WAF applies configured criteria to requests and takes an action when a rule matches. It is an additional filtering layer, not a replacement for fixing vulnerabilities in the application itself. The WAF’s view is shaped by the traffic and request attributes its configuration inspects.
#1 Best Overall
- Fortinet Web Application Firewall - virtual appliance for all supported platforms. Supports up to 2 x vCPU core
- Fortinet HW FWB-VM02
- Manufacturer Part: FWB-VM02
How does AWS WAF decide what to do with a request?
AWS WAF organizes protection in a web access control list, or web ACL, associated with a protected resource. A web ACL contains rules or rule groups. Rules specify what to inspect and what action to take when a request matches. The web ACL also has a default action for requests that reach the end of evaluation without triggering a terminating rule.
AWS WAF evaluates rules in priority order. The action a rule takes affects whether evaluation continues:
Rank #2
- Fortinet Web Application Firewall - virtual appliance for all supported platforms. Supports up to 4 x vCPU core
- Fortinet HW FWB-VM04
- Manufacturer Part: FWB-VM04
| Action | Effect in AWS WAF |
|---|---|
| Allow | Allows the request and stops evaluation of later rules. |
| Block | Blocks the request and stops evaluation of later rules. |
| Count | Records a match and continues evaluating subsequent rules. |
| CAPTCHA or challenge | Applies a verification action; the result depends on token state and configuration. |
These action and ordering details describe AWS WAF, not every firewall product. A rule’s priority and the web ACL’s default action matter because they shape the result when rules overlap or no terminating action occurs.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Sources: AWS, “How AWS WAF works” and AWS, “How AWS WAF handles rule and rule group actions”.
Rank #3
- Fortinet Web Application Firewall - virtual appliance for all supported platforms. Supports up to 8 x vCPU core
- Fortinet HW FWB-VM08
- Manufacturer Part: FWB-VM08
What can a WAF inspect?
Inspection depends on the product and the rules an administrator configures. AWS documentation gives examples such as a request’s originating IP address or geography, the length of parts of a request, strings in request components, and patterns associated with SQL injection or cross-site scripting. These examples describe AWS WAF capabilities, not a universal list of what all WAFs inspect.
A match means that a request met a configured condition; it does not by itself prove that the request is malicious. Conversely, a request that does not meet the configured conditions may pass through even if it is unwanted. Coverage is therefore tied to the inspection criteria and policy in place.
Rank #4
- Meraki MX100: A building block for SASE in a rack-mountable form factor. Medium- to large-branch security and SD-WAN appliance for up to 500 users.
- WAN: 1 x GbE RJ45, 1 x USB (cellular failover), Dual-purpose: 1 x GbE RJ45 +++ LAN: 8 x GbE RJ45, 2 x GbE SFP
- Stateful firewall throughput: 750 Mbps +++ 500 Mbps site-to-site VPN throughput
- Unified management for security, SD-WAN, Wi-Fi, switching, MDM, and IoT +++ Centralized management via web-based dashboard or API
- True zero-touch provisioning +++ Smartphone-like firmware updates
Source: AWS, “AWS WAF rules”.
What does it mean to bypass a WAF?
At a high level, a WAF bypass occurs when a request reaches an application or causes an unwanted result despite the intended filtering policy. This can happen when the rules do not match the request as it is actually handled, or when firewall deployment and application behavior do not align. “Bypass” is not one universal technique: the details depend on the product, configuration, traffic path, and application.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
For defenders, the useful question is whether the WAF’s configured inspection and actions cover the traffic that reaches the application. Review rule coverage, request handling and parsing, deployment boundaries, and match visibility in an environment you are authorized to assess. A WAF should supplement secure application design and remediation, not be treated as proof that an application is safe.
Best Value
- ◆Powerful Celeron N2840 Processor: N2840 Processor, 2 Cores 2 Threads, 1M Cache, Max Turbo Frequency 2.58 GHz, TDP 7.5 W. Whether you need a robust home server, a versatile tool for school education, seamless web browsing, or even efficient business office or industrial tasks, providing efficient performance for everyday tasks.
- ◆Dual 1000M LAN: Mini Router PC with 2*Realtek RTL8111H network card chip full UDE 1000M with filter connector.Soft Router can monitor network data, improve network security, powerful and widely used.
- ◆DDR3L Memory & Large Storage Capacity: Firewall box computer with 1 x DDR3L SO-DIMM memory 1333/1600MHz, 1xMSATA3.0 SSD.
- ◆UHD Graphics & 4K Dual Screen Display: N2840 processor integrated UHD Graphics, HD and VGA dual display interfaces support 4K@60Hz.
- ◆Versatile Connections ports: 2 x1000M Realtek RTL8111H-LAN,2 xUSB3.0, 4 xUSB2.0, HDMI,VGA,AUDIO supports data storage and system boot.Mini desktop computer with WIFI dual antenna, which providing high-speed transmission and reliable connectivity. Support Dual Band Wifi, Internet, streaming media and audio can be used perfectly without interrupting the connection. Enjoy faster file transfers and smoother online experiences.
How to test and tune WAF rules safely
AWS recommends testing changes in a staging or test environment before applying them to live traffic. Its guidance also recommends using count mode with production traffic before changing rules to allow or block. Count mode helps teams see which requests match without having the rule enforce an allow or block decision.
- Test outside production first. Apply the proposed configuration in a staging or test environment and check how expected requests are handled.
- Confirm the protection is attached where intended. In AWS, verify that the web ACL is associated with the resource you mean to protect.
- Review priority and default behavior. Check rule order and the web ACL’s default action so you understand how requests are evaluated when rules match—or do not.
- Observe matches in count mode. With production traffic, review which requests would match and look for legitimate traffic that could be affected before enforcing allow or block behavior.
- Enforce and retest after changes. Move to enforcement only after reviewing the observed impact, and repeat testing when rules or application behavior change.
These steps reflect AWS’s testing guidance and configuration model; exact controls and labels vary among WAF products.
Source: AWS, “Testing and tuning your AWS WAF protections”.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
