Imperva Cyber Community

communities_1.jpg
 View Only

  • 1.  Find traffic data

    Posted 05-17-2023 10:43

    Kindly assist how to get below data

    1. Average Egress & Ingress traffic in WAF?
    2. What is the range and peak value of HTTPS transaction per second(TPS) in WAF?
    3. What is the range and peak value of HTTPS transaction per second(TPS) in DAM?


    #DatabaseActivityMonitoring
    #On-PremisesWAF(formerlySecuresphere)

    ------------------------------
    Urvin Shah
    Senior Cybersecurity Consultant
    M.Tech Solutions (India) PRIVATE LIMITED
    Mumbai
    ------------------------------


  • 2.  RE: Find traffic data

    Posted 05-22-2023 03:55

    Hello Urvin,
    1. Average Egress & Ingress traffic in WAF?
           >Maybe please try checking the output of the command below and look for the application with Kbps remark

            cat /proc/hades/status      --->this command gives you atleast the applicative traffic passing through your gateway
       
    or 
            watch -d -n 1 cat /proc/hades/status

    For your remaining questions - average range /https peak , im not sure if this is present in your the datasheet.

    Hope this helps.
    Leangf



    ------------------------------
    [Leangf]
    ------------------------------

    Original Message


  • 3.  RE: Find traffic data

    Posted 07-06-2023 15:10

    Hi Urvin,

    There is no way to calculate or see the average of Egress & Ingress traffic in On-Prem WAF.

    Average Egress & Ingress traffic in WAF?

    The average egress and ingress traffic in a Web Application Firewall (WAF) can vary depending on various factors such as the size and popularity of the web application, the level of incoming traffic, the types of attacks being mitigated, and the specific configuration of the WAF.

     

    In general, egress traffic refers to the data that is leaving the protected web application, while ingress traffic refers to the data that is entering the application.

    The WAF sits between the application and the external network, monitoring and filtering the incoming and outgoing traffic to identify and block potential threats.

     

    The volume of egress and ingress traffic in a WAF is typically measured in terms of bandwidth or data transfer rates. It's important to note that these metrics can vary significantly depending on the specific web application and its usage patterns. However, to give you a rough idea, the average egress and ingress traffic in a WAF can range from a few megabits per second (Mbps) to several gigabits per second (Gbps).

     

    To get accurate information about the egress and ingress traffic for a specific WAF deployment, it's best to monitor the network traffic in real-time using tools like network monitoring systems, firewalls, or specialised WAF analytics solutions.

    These tools can provide detailed insights into the traffic patterns, including the volume, sources, and types of traffic flowing through the WAF.



    ------------------------------
    Ankit Sharma
    Cloud Security Engineer | Enterprise Services
    Imperva
    ------------------------------

    Original Message