Imperva Cyber Community

communities_1.jpg
 View Only

  • 1.  Does attack analytics in cloud and on-prem corelate alerts

    Posted 03-21-2025 06:35

    Hi, 

    If a customer have both cloud WAF and On-premises WAF for the same backend applications, does the alerts get corelated for cloud WAF security logs and on-premises WAF security logs? 

    Is the attack analytics for on prem and cloud come as two seperate licenses?


    #CloudWAF(formerlyIncapsula)
    #On-PremisesWAF(formerlySecuresphere)

    ------------------------------
    Poorna Wijesinghe
    Associate Engineer
    Connex Information Technologies (Pvt) Ltd.
    Colombo
    ------------------------------


  • 2.  RE: Does attack analytics in cloud and on-prem corelate alerts

    Posted 03-31-2025 13:22

    Hello,

    Yes, the logs are correlated. There is field in Attack Analytics that indicates whether the alert originated from the CWAF or WAF-GW. 



    ------------------------------
    Jaired Anderson
    Imperva
    https://www.imperva.com/
    ------------------------------

    Original Message