WAF in FW ?

[dhikra-marghli8]

Hello

I have a very important question

I worked on security projects in Cisco and Fortigate

question : i want to know if FW cisco have WAF : yes or not ? if yes how ?

and also of FW fortigate have WAF ?

i wait a reply from expert security

Thanks

[M02@rt37 · Accepted solution]

@dhikra-marghli8 

FortiGate can be integrated with FortiWeb to redirect web traffic through FortiWeb for WAF inspection.

As concerned Cisco, there are the Cisco Advanced WAF and the Bot Protection to use in conjonction with a NGFW. Discover the advanced WAF (PDF).

[balaji.bandi · Accepted solution]

Not that i aware Cisco have direct WAF product, it work with conjunction with other integration.

best deployment is, always use Load balancer to protect against these kind of requirement. i have good deployment using Citrix, F5 ..So on.

As mentioned above top vendors deployed across many places, Fortiweb also come in to that area. ( did PoC but most vendors already have Citrix contract to so they go with Citrix Load Balance - Due to Citrix environment - my views)

[Ruben Cocheno]

@dhikra-marghli8 

Ideally you have WAF enabled where your SSL decryption happens, so Loadbalancers are usually the place where that decryption, inspection and re-encryption again happens.

[Kristiane Araujo]

I´ve working on a project that has the same challenge. Customer has a pfSense FW and he wants to replace it for a FW+VPN GW + WAF solution. I didn´t find WAF security capability on Firepower. I just found the Cisco Secure Cloud WAF cloud-based services which is a O&M Radware solution. I´d appreciate if someone could help with more information.