Imperva Application Security
Web application firewallimperva
SaaS reverse-proxy WAF whose built-in injection and access rules block requests by default.
- Provider
- default
- Category
- Security
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| botProtection | boolean | — | no | — | ▸ true |
| cdnEnabled | boolean | — | no | false | inherited |
| customRuleCount | integer | — | no | — | inherited |
| ddosProtection | boolean | — | no | true | inherited |
| deployment | enum | cloud-waf | waf-gateway | connector | no | cloud-waf | inherited |
| managed | boolean | — | no | false | ▸ true |
| managedRuleSet | string | — | no | — | ▸ imperva-default |
| mode | enum | detection | prevention | off | no | — | ▸ prevention |
| rateLimiting | boolean | — | no | — | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "imperva", component: "imperva" }Web Application Firewallalibaba-wafAWS WAF web ACLaws-wafAWS WAF Classicaws-waf-classicAzure Web Application Firewallazure-web-application-firewallFirewall for AIcloudflare-firewall-for-aiCloudflare WAFcloudflare-wafCorazacorazaModSecuritymodsecurityNAXSInaxsiGeneric web application firewallwafGoogle Cloud Armorgoogle-cloud-armorreCAPTCHA Enterprisegoogle-recaptcha-enterpriseWeb Application Firewalloci-waf
# yaml-language-server: $schema=../../schema/component.schema.json # Imperva Application Security (Cloud WAF): reverse-proxy SaaS WAF. Per "Create and Manage # Policies" the built-in WAF rules (SQL Injection, Cross Site Scripting, Illegal Resource # Access, Remote File Inclusion) default to Block Request, so it enforces out of the box. schemaVersion: "1" type: "component" id: "imperva" kind: "waf" provider: "default" docs: "https://docs-cybersec.thalesgroup.com/bundle/cloud-application-security/page/policies.htm" defaults: managed: true mode: "prevention" managedRuleSet: "imperva-default" botProtection: true properties: deployment: type: "enum" values: ["cloud-waf", "waf-gateway", "connector"] default: "cloud-waf" ddosProtection: type: "boolean" default: true cdnEnabled: type: "boolean" default: false