Imperva Application Security

SaaS reverse-proxy WAF whose built-in injection and access rules block requests by default.

Provider
default
Category
Security
Properties · 4 set by this component
propertytypevaluesrequiredkind defaultthis component
botProtectionboolean—no—▸ true
cdnEnabled · component propertyboolean—nofalseinherited
customRuleCountinteger—no—inherited
ddosProtection · component propertyboolean—notrueinherited
deployment · component propertyenumcloud-waf | waf-gateway | connectornocloud-wafinherited
managedboolean—nofalse▸ true
managedRuleSetstring—no—▸ imperva-default
modeenumdetection | prevention | offno—▸ prevention
rateLimitingboolean—no—inherited
Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.
Use it in a design
nodes:
  - { id: "imperva", component: "imperva" }
Other Web application firewall products · 13
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# Imperva Application Security (Cloud WAF): reverse-proxy SaaS WAF. Per "Create and Manage
# Policies" the built-in WAF rules (SQL Injection, Cross Site Scripting, Illegal Resource
# Access, Remote File Inclusion) default to Block Request, so it enforces out of the box.
schemaVersion: "1"
type: "component"
id: "imperva"
kind: "waf"
provider: "default"
docs: "https://docs-cybersec.thalesgroup.com/bundle/cloud-application-security/page/policies.htm"
defaults:
  managed: true
  mode: "prevention"
  managedRuleSet: "imperva-default"
  botProtection: true
properties:
  deployment:
    type: "enum"
    values: ["cloud-waf", "waf-gateway", "connector"]
    default: "cloud-waf"
  ddosProtection:
    type: "boolean"
    default: true
  cdnEnabled:
    type: "boolean"
    default: false

The same page as markdown, for an agent: /catalogue/components/imperva.md