Hillstone W-Series Web Application Firewall (WAF) provides enterprise-class, comprehensive security for web servers, applications and APIs. It defends against attacks at both the network and application layers, providing protections against DDoS, the OWASP Top 10 threats, and bot attacks, to list a few examples. In addition, the WAF validates APIs against the schema defined in OpenAPI, and automatically generates positive security model policies to detect and defend against attacks and misuse.

Hillstone’s app firewall combines traditional rules-based detection with innovative semantics analysis. This dual-engine approach significantly increases accuracy while minimizing false positives by creating a context-aware analysis engine. Hillstone WAF also leverages machine learning technology to fine tune security policies and block unknown threats and attacks. Furthermore, logs can be automatically aggregated across multiple dimensions, allowing admins to easily identify suspicious anomalies or locate false positives, and then further refine policies as needed.