-
Provide ability to create customer created custom WAF/Attack signatures
This is a requirement to be able to create custom signatures when/if needed, this is a must have to adopt this platform.2
-
Add ability to "skip" IP Reputation as option in custom policy rule similar to how WAF, MUM and Bot can be skipped
why - its awkward and inefficient to have skip logic spread across multi areas (custom policies rules and trusted client rules). We have to define the identifying criteria for safe clients in two places. who - security engineers will benefit from ...0
-
Intregatrion with logrhythm
Intregatrion with logrhythm on premise0
-
Support Shared VPC networks and subnetworks in GCP VPC Site
GCP has a Shared VPC concept; networks can be defined and managed within the scope of one GCP project and consumed by resources created in other GCP projects. This is a common pattern used to limit access for network configuration, and for hub and...0
-
IPv 6 added allow list and trust user.
Is an option available to configure skip from waf, Api-protection, IP-reputation, malicious user detection, Bot defence on “global level for all the load balancers”.(currently this option is available only under trusted client rules on each lb lev...0
-
Pool, Public IP and Virtual Site
If a customer needs to control egress traffic, to limit egress source to a subset of REs, a Virtual Site must be set. If the origin pool is an IP, the customer has to choose "Private IP", even if the origin pool is a Public IP. That's not obvious....0
-
API Protection (Discovery) - Path Case Normalization
Requested Enhancement Add a method to enabled case Normalization for API Protection (Discovery), which will resolve the following gap. Current Behavior API Discovery is case sensitive, regarding the PATH. This impacts Discovery/Inventory/Shado...0
-
Add graylog to receiver of global log receiver.
It would be useful to be able to plug graylog to the global log receiver.0
-
Using ThreadCampaign ID Exclusion in WAF Exclusion Rules
I want to be able to set exclusion by WAF Exclusion Rule for each ThreadCampaign ID. Currently, there is only Enable or Disable, so we cannot handle false detections because we cannot make detailed exclusion settings.0
-
Need API rate limiting for hourly basis
We do have API rate limiting the number of requests per minute or second. If attacker wants to send an attack by 100's of requests and Volterra have the Rate Limiting feature it still blocks for an minute and accepts requests in the next minute. T...0