Security

​

Web Application Firewall (WAF)

​

Overview

• OWASP Core Rule Set integration
• TypeAuth managed security rules
• Real-time threat detection and blocking
• Low false-positive rate

​

Key Protections

• SQL Injection attacks
• Cross-Site Scripting (XSS)
• Remote Code Execution
• Local File Inclusion
• Remote File Inclusion
• HTTP Protocol Violations
• Common Web Attacks

​

Configuration

​

Via Dashboard

1. Navigate to Security
2. Select “Application Security”
3. Toggle WAF status (Enable/Disable)

​

Via API

PATCH /{account_id}/security/waf/{application_id}?status=enable

​

OWASP Rules

• Protocol violation checks
• Request limits
• HTTP policy enforcement
• Bad robots detection
• Security scanner detection

​

Geoblocking

​

Available Regions

• 🌎 US (United States)
• 🇪🇺 EU (European Union)
• 🇮🇳 IN (India)
• 🌐 US and EU combined
• 🦘 AU (Australia)
• 🇩🇪 GE (Germany)
• 🔒 TOR and Open Proxies

​

Configuration

​

Via Dashboard

1. Navigate to Application Settings
2. Select “Geoblocking”
3. Choose allowed regions
4. Save configuration

​

Via API

PATCH /{account_id}/security/geoblock/{application_id}?area=US

​

Behavior

• Only traffic from selected regions will be allowed
• All other traffic will be blocked with a 403 Forbidden response
• IP geolocation is performed at the edge for minimal latency

​

Security Best Practices

​

1. WAF Implementation

• The WAF is your first line of defense
• Protects against known vulnerabilities
• Regular updates with new security rules

• Exposure to common attack vectors
• Increased vulnerability to zero-day exploits
• No protection against automated attacks

​

2. Geoblocking Strategy

• Your user base location
• Compliance requirements
• Business operations regions
• Known threat origins

​

3. Monitoring and Alerts

• TypeAuth Map Hiys
• Security Event logs
• Traffic analytics

​

Implementation Guide

​

1. Basic Security Setup

POST /api/v1/applications/{application_id}/security/basic
Content-Type: application/json

{
  "waf_enabled": true,
  "geoblocking": {
    "enabled": true,
    "allowed_regions": ["US", "EU"]
  }
}

​

Response Codes

​

Recommendations

1. Always-On Security
   • Keep WAF enabled
   • Configure appropriate geoblocking
   • Monitor security events
2. Regular Reviews
   • Check security logs
   • Review blocked traffic
   • Update regional restrictions
3. Incident Response
   • Monitor security alerts
   • Document security events
   • Update security policies

​

Limitations

• Maximum of 10 custom WAF rules per application
• Geoblocking limited to predefined regions
• WAF rule updates may take up to 5 minutes to propagate

​

Future Security Features

• Custom WAF rules
• Advanced threat analytics

​

Need Help?