Check Point · Cloud and application protection
Check Point WAF
Protection for web applications and APIs.
Overview
Protection for web applications and APIs. Assess the insertion point, certificates, legitimate traffic, policies and application release process. Adoption requires testing and monitoring; analysis models do not remove the need for governance or guarantee the absence of false positives.
Technical specifications
| Scope | Cloud-native protection for web applications, GenAI applications and APIs; it does not replace a network firewall, identity controls, secure development or application remediation.Inventory applications, APIs, domains, certificates, origins, methods and sensitive data. |
|---|---|
| Onboarding and traffic path | The current page documents WAF as a service and automation through declarative infrastructure-as-code APIs; the insertion method must follow the officially supported architecture for the selected application and environment.Document the traffic flow before and after deployment, health checks, certificate, controlled bypass and rollback; approve only after a proof of concept. |
| Policy and operations | The offering uses contextual analysis and adapts to application traffic. Even so, prevention, exceptions and response require observability, testing of legitimate flows and human review in the actual environment.Test critical routes, authentication, uploads, APIs, errors, alerts, exceptions and emergency access allowances. |
| Licensing and limits | Entitlements and quotas depend on the contracted package. CNAPP account documentation, for example, publishes specific WAF allowances within that licence, which must not be extrapolated to another package.Check the package, assets, requests, retention, environments and overages in the current contract. |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.
Documents and references
- Complex projects require more than knowledge of a single technology.
- Better decisions begin with a better understanding of the environment.
- The network that connects the business must be ready to support it.
- Cloud is not where the infrastructure is. It is how it was architected to operate.
- Connectivity is necessary. Controlling every communication is security.
- Security designed to protect what keeps your business running.
- Official manufacturer page