CyberNEO

WAF Automator for Azure

Managed security platform purpose-built for Azure WAF

SERVICE

Providing from Azure WAF implementation
to operation

CyberNEO Azure WAF is a solution that allows you to implement Azure Web Application Firewall in a few simple steps and automates security operations with AI. This is the best solution for customers who are using Azure Application Gateway and Azure Front Door and are considering implementing Azure WAF.

Easy implementation steps

WAF Automator for Azure is developed with a concept that can be deployed in four steps.

Issue a CyberNEO account and log in to the CyberNEO portal.
Enter your Azure tenant and subscription information in the CyberNEO portal. (Application registration and role creation are performed automatically, and an environment for accessing Azure resources is prepared.)
Select a resource group to create a WAF policy and create a WAF policy. (A WAF policy is automatically created.)
Associate the created WAF policy with your Azure resources (Azure Application Gateway, Azure Front Door).

Stream analysis for immediate threat detection

In order to analyze Azure WAF events immediately, a log collector function consisting of Azure Event Hubs and Azure Functions is placed on the customer's tenant, enabling immediate threat analysis in CyberNEO's cloud environment.

CyberNEO cloud analyzes with AI and threat intelligence, and when an attack is detected, it dynamically changes the Azure WAF policy and blocks the attack source.

MAIN FUNCTIONS

WAF deploy function

Configure the log output settings and WAF rules required for WAF operation.

Dynamic response function

Attacks are detected with AI, and communication from sources judged to be high risk is blocked.

Threat intelligence delivery function

It collects high-risk sources of attacks and distributes them as a blacklist.

Attack event display function

Enables real-time viewing of attack detection events from the CyberNEO management portal. You can check the policy operation results and attack detection status.

Attack analysis report

Detected attack information (source, trend, destination, attack content, etc.) is displayed as a daily/monthly report.

Multi-tenant function

WAF and user management can be performed individually for each tenant, and multiple tenants can be centrally managed.

Multi-user access capability

Multiple users can be registered in each tenant, and authority management and audit log functions are provided.

User role management function

Administrator and read-only privileges can be granted on a per-user basis.

One-time password function

Supports one-time password authentication for access to the administrative console.

Multilingual

Supports Japanese and English portal display.

Audit log function

The content and time of each user's operation is output as an audit log.