Cloud4C will configure F5 advanced WAF with LTM features on Azure Virtual machine with ARM templates. For protection of container-based applications/VM’s, F5 Nginix ingress controller to be configured on Azure virtual machine as an Appliance. Generally, Cloud4C would deploy the ingress controller behind a L4/L7 load balancer to spread the load to all of the ingress controller PODs

Cloud4C managed F5 AWAF solution brings in the industry-leading F5 Advanced WAF robust web application firewall protection by securing applications against threats including layer 7 DDoS attacks, malicious bot traffic, all OWASP top 10 threats and API protocol vulnerabilities.

Cloud4C shall configure F5 Advanced WAF which has inbuilt functionalities like behavioral analytics, automated learning capabilities, and risk-based policies to secure external publishing Apps, website, mobile apps, and APIs—whether in a native or hybrid Azure environment. The solution also includes load balancing, IP Intelligence threat feed, and Threat Campaigns.

Cloud4C solution approach includes

• Understanding project requirements for advanced WAF solution deployment
• Creating Design as per the requirements to prevent web attacks, vulnerabilities, proactive bot defenses etc..
• Deploy the solution as per the agreed design
• License for F5 AWAF solution on HA with Nginix controller
• Configure features such as
• Proactive bot defence
• OWASP TOP compliance dashboard
• Analytical rules -OOTB and custom
• Virtual patching to mitigate code-level and common vulnerabilities
• Browser data encryption
• Deploy Ngnix Ingress controller - Installation with Manifest or Helm

Recommended Azure VM SKU configuration - DS4 series with HA configuration for AWAF and for Nginix Controller - DS series VM's