Cloud4Y WAF

Main article: Firewall

2024: WAF Solution Presentation

The company Cloud4Y on February 19, 2024 announced a solution designed to protect companies from. cyber attacks Used provider firewall continuously protects the infrastructure of companies from DDoS-attacks the L7 level, operation vulnerabilities in the business logic of applications.

Increasing cyber attacks on companies from the financial sector,,, public sectors telecom retail formations demand to look for ways to protect sensitive information and quickly respond to current threats. One of these methods is to use services from. cyber security cloudy providers The enterprise cloud provider Cloud4Y uses a cluster and geodistributed WAF Cloud4Y service based on a certified FSTEC of Russia platform with protection against multi-gigabit DDoS attacks at the L3/L4 network level and protection against complex attacks at the L7 web application level.

A comprehensive protection service allows you to track and block targeted attacks on companies' web applications. The service has great functionality: signature and behavioral methods for detecting anomalies, machine learning and early suppression tools. Able to protect against attacks by hackers and bots, zero-day vulnerabilities, the top 10 OWASP threats, vulnerabilities in network infrastructure, attacks on application business logic, and corporate data leaks.

The service core uses PT AF software. PT Application Firewall is a dynamic web application layer firewall from Positive Technologies. This defense system is able to detect and block attacks of different directions. The solution operates inside the Cloud4Y cloud platform, is certified by the FSTEC of Russia and can be used as a means of protecting information when building comprehensive information protection systems and subsequent certification. Another important feature: The WAF Cloud4Y service allows you to protect web applications that are located both in the Cloud4Y cloud and outside from exploitation of existing vulnerabilities - without making changes to the application itself.

The solution is used as part of the means of protecting the information of the certified Cloud4Y cloud, which houses state information systems and personal data systems.