Unanswered Threads

We're hosting an application and data security user group in Newport Beach, California, on October 16. The content is curated specifically for current users of the products, and will include: ● Product roadmaps and solution overviews: ...

Hello All, I am doing Cloud WAF testing. I need information regarding how can i do PoC in Cloud WAF. How can i create a web application so that we can test any vulnerable URL we can access from outside and how Cloud WAF will protect. What would ...

Dear Team, Greetings! One of our application, customer has uploading scanned document. Which is converted via base64, but whereas WAF has identified in below signatures. We required, Securesphere how it reads the document. Cross site scripting ...

Hi, Just wondering if TRP and NGRP can co-exists in a WAF policies? e.g: Current setup: is TRP with ssl encryption/decription enabled Proposed setup: retain some WAF server policies with TRP and create new WAF server policies with NGRP enabled? ...

Hi Everyone If someone need help or have a questions about DAM, DBF, WAFOnPrem, CWAF or another product of imperva Join to the channel https://t.me/impervians Telegram IMPERVA - DAM - WAF - CWAF You ...

We want to discover Azure DB in DSF. While adding Azure account what does Asset ID and Server Host Name refers to. Kindly assist. #jSonar ------------------------------ Urvin Shah Consultant M.Tech Solutions (India) PRIVATE LIMITED ...

Hi guys. A question, I am detecting domains that do not belong to my company that are redirecting to URLs of my entity that are configured in Waf On Premise. Is it possible to create a rule that allows blocking URLs to my official domains in WAF On ...

Hi everyone, I'm seeking some recommendations about a topology intended for deployment in an end-user environment. From the topology, one ImpervaGW (NGRP mode) will have: Networking: 2 pairs of interfaces, each pair will create alias mapping ...

Hi There, Is there any plan to have any functionality to analyse audit events by DRA in real or near real time? We have seen some uservoices of customers with such requirements which are quite useful when an Incident Responder has to identify any anomaly ...

Hi There, As per Imperva documentation (https://docs.imperva.com/bundle/v14.16-dam-upgrade-guide/page/69357.htm), support for the IIAS (IBM Sailfish) log collector has been discontinued and it is not currently supported in the DSF Hub. Previously ...

Hi, I understand that by design the ADC updates is bulk to addressed known CVEs to my web servers, but what I want to achieve is only download the specific signature e.g:Signature name: CVE-2022-41040, CVE-2022-41082: MS Exchange Authenticated SSRF ...

We have client-to-Imperva mTLS set up on several test environment sites and there are some cases where we would like to NOT require the certificates from certain clients. Is there a way to do an exception based on IP or some other attribute to where the ...

Hello Imperva Experts, We need to configure an auditing policy that matches for two criteria; when the DB username is "example" or when the OS username is "example". Current configuration: We are using two different policies. One to audit when ...

Dear Imperva team, I install WAF in Reverse Proxy mode and follow the traffic is Client -> WAF -> backend server. When i edit file host on client to test the service of website. client request: thuedientu.tct.vn/etaxcbt -> Display on client ...

Hi all, How to configure a cloud WAF account with ADFS for external authentication. #CloudWAF(formerlyIncapsula) ------------------------------ Rajesh Kanna G Senior Associate Technical- Network Security Value Point Techsol Private Ltd. Bangalore ...

Hi Team, Would like to know if its feasible to create a sec/audit policy based on below use case. Alert to be generated when the query contains insert/update to a specific table:column when the value of the column exceeds or matches a number ...

This is a known issue with Imperva Cloud WAF and I have a user story/user voice out there which would benefit from upvotes to convince Imperva Cloud WAF dev teams to fix/enhance. Please vote for it. https://imperva.uservoice.com/forums/957317-cloud-waf/suggestions/48440006-support-for-origin-setting-page-in-cloud-waf-porta ...

Does anyone know of a way to filter bandwidth information in the Performance page by filetype? For instance can I get the bandwidth for all jpg requests? The performance dashboard has accumulated and cached transfer values, but I need more granularity. ...

is syn cookie feature available with network protection package. since in network protection we are just advertising our prefix through imperva. is it possible to use syn cookie feature. #DDoSProtectionforNetworks ------------------------------ ...

Hello Team, Anyone tried to send Alerts from Imperva to Telegram? Could you share with me a guide? Thank you. #On-PremisesWAF(formerlySecuresphere) ------------------------------ Duc Dinh Minh Security Engineer I M.Tech Holdings Pte Ltd ...