Overview What is a Web Application Firewall? A web application firewall (WAF) is a specific form of application firewall that filters, monitors, and blocks HTTP traffic to and from a web service. By inspecting HTTP traffic, it can prevent attacks exploiting a web application’s known vulnerabilities, such as SQL injection, cross-site scripting (XSS), file inclusion, and improper system configuration. 1 Many basic security measures are applied in a WAF are supported by the Open Web Application Security Project (OWASP) owasp.

Cloud Considerations updated: 2023-02-24 Table of Contents: Overview Considerations Where do I start? Cloud Native vs Cloud Agnostic Nework Segmentation & Hiearchy Network Segmentation Network Hierarchy Security Firewall Cloud Workload Protection Protect Your Cloud References Overview Going to the cloud can be a difficult journey and has a lot of obsticles around it. Let’s try to break down those obsticles leveraging publications and information readily availble to help you get through your cloud journey.

updated: 2023-04-17 Palo Alto API Working with Palo Alto Firewall and the official SDK I found it difficult to get the info I wanted in the format I needed in some casees. So, I begain writting out some code that would handle the work for me. Github project How to Use Install the package which has been tested mostlyon 3.8+ python -m pip install paloaltoapiConfiguration Variables Use environment variables for configurations:

updated: 2022-09-07 (Under Construction) Introduction Palo Alto announced direct NGFW Cloud integration with AWS as well as AWS announcment back in March of 2022. This is a really new product that integrates AWS Firewall Manager with Palo Alto NGFW. I am still reviewing it, but here are some initial docucmentations around it that I’ve been looking at and evaluting and this is a PDF with a brief overview: Palo Alto Cloud NGFW (file removed due to NDA)

updated: 2022-09-08 (under construction…) Introduction Description: I wanted to review the best practices to inpsect AWS traffic and how this would be architected. I ended up going through a few iterations of different designs and the pros and cons of each. This is a space on some of those designs and online resources I used. I hope this becomes a sort of one stop shop in evaluating different methodoligies that can be leveraged to secure an AWS Cloud solution.

orig: 2021-05-15 updated: 2022-08-28 Introduction Description: I was using the PaloAltoNetworks Github project, but wanted to customize it and also was looking at adding it to some internal projects and try to understand what I was doing. My original code was built around Palo Alto’s XML API, so I’ve been updating it against Palo Alt’s newer version since updating their API (begining in PanOS 9.0 release see PAN-OS Documents ) to use REST API Request and Response Structure, which, I feel, made it a lot easier to interact with.