The login page is a critical entry point for an application and is frequently targeted by attackers. To safeguard against unauthorized access, it is essential to implement stringent security measures. Ensuring the security of the login page is vital for protecting user data and maintaining the integrity of the application. Barracuda WAF-as-a-Service can auto-detect and protect from various threats like Account Takeover, Credential Stuffing, Credential Spraying using advanced Machine Learning (ML) and Artificial Intelligence (AI) capabilities.
The ML and AI engine of Barracuda WAF-as-a-Service can auto-detect login pages of an application and provide security policy recommendations. Administrators can review and apply the recommended security policies to secure the application. This feature is available only for applications with the Premium license plan. Opting for the Premium license allows users to fully leverage these enhancements, ensuring they receive the highest level of security.
Prerequisite
Set Enable Advanced Bot Protection to ON for the application on the BOT PROTECTION > Dashboard page.
How it works
Note: Enable Advanced Bot Protection must be set to ON for the application.
The Barracuda WAF-as-a-Service monitors the traffic and identifies login URLs in the application.
Generates security policy recommendations for the URLs on the RECOMMENDATIONS page. Recommendations are displayed until they are applied or ignored.
Click Show Changes to view the recommended configuration settings and click Apply.
On the Application Profiles page, the URL is added with the specified configuration.