Cloudflare Announces Free Web Application Firewall

Cloudflare announced that they are offering a Web Application Firewall (WAF) for free to customers on the free plan. WAF will provide access to the WAF user interface that comes with a rule that can be used to automatically block known threats.

The free managed rules have been tested against Cloudflare networks and allow free users to activate their firewall and enjoy the benefits of a firewall right away.

Since the rule-set is a managed rule-set, free users will benefit from updates that will protect their sites from new widespread security threats.

The free tier of Firewall is specially tuned to protect WordPress websites as it protects against common WordPress exploits.

Cloudflare WAF

Cloudflare WAF is an application firewall that monitors web traffic from the Internet to websites and automatically blocks any traffic that it detects as malicious.

A firewall uses a rule set which is a set of patterns and signals that it looks for to identify and filter malicious traffic.

Cloudflare Free Managed Ruleset

Free Cloudflare WAF comes with a managed rule that is designed to block a multitude of common vulnerability attacks.

A managed ruleset consists of pre-configured rules that allow the user to deploy a firewall that is ready to inspect and block malicious web traffic.

The advantage of a managed rule is that the firewall is ready for deployment and with minimal configuration on the user side.

cloudflare Describes this free managed rule,

“Designed to provide mitigation against high and wide-reaching vulnerabilities. Rules are secure to apply to most applications. If you have deployed Cloudflare Managed Rule Sets for your site, you will need this managed rule set.” There is no need to deploy.”

The Free Managed Rules will be updated whenever a widespread threat affecting multiple websites is observed. This is a huge deal that can go a long way toward mitigating the effects of brand new hacking attacks.

The free version of Ruleset protects against Shellshock server security bugs, blocks Log4J vulnerabilities, and protects WordPress websites from vulnerabilities that are common to WordPress.

Access to Cloudflare Firewall User Interface

Cloudflare is giving users free access to the Firewall User Interface (UI), a dashboard where publishers can manage their firewalls.

The dashboard allows users to change their firewall and monitor the actions taken by the firewall through the Security Overview tab.

Free users can do the following in the dashboard:

“Overriding all rules for log or other action.

Overriding specific rules only for the log or other action.

Disabling a rule or a specific rule completely”


Read Official Cloudflare Announcement

WAF for all: protecting the web from high-severity vulnerabilities

Learn about Cloudflare WAF Managed Rules

Managed Rule Sets

Read about the redesigned Cloudflare WAF UI


Source link

Leave a Comment