WAF logs, read today
Web application firewall logs enter the same detection flow as the rest of your estate.
Fabric
Block the attacker at the firewall you already run.
When an analyst confirms a threat, Fabric sends the block to your Stormshield firewall from the same screen. Nothing runs until a person approves it.
From verdict to block, with a person in the middle.
- Step 1Threat confirmedA case shows a source worth stopping
- Step 2Analyst reviewsThe confirmation names the firewall before anything is sent
- Step 3Sent insideThe command travels through the Sidecar in your network
- Step 4Firewall blocksYour Stormshield firewall applies it over its own HTTPS interface
- Step 5RecordedWho, when, the target and the exact commands are kept
No block runs on its own.
- Human in the loop
An analyst confirms each block. Unblock works the same way.
- No inbound opening
Commands leave from the Sidecar inside your network, so nothing outside connects in.
- Full audit trail
Every action records who sent it, when, the target and the commands the firewall received.
The confirmation tells you exactly what will happen.
Before the block is sent, the analyst sees the target, the firewall that will apply it and who is asking.
Confirm block
- Target
- Source address from case
- Firewall
- Stormshield SNS, head office
- Action
- Block source
- Requested by
- Analyst on shift
Web applications
Web attacks are part of the same picture.
Your web application firewall logs are read like any other source, then correlated with endpoint, network and identity events.
One incident, not two
A blocked web request followed by a successful sign-in becomes one case instead of two separate alerts.
Block at the firewall
Once an analyst confirms the web attack, Fabric can block the source at your Stormshield firewall.
Same audit trail
Web-driven blocks are recorded exactly like every other Fabric action.
What Fabric does today.
| Capability | Status |
|---|---|
| Block or unblock a source on Stormshield SNS | Available |
| Analyst approval before any action | Always on |
| Action audit trail | Available |
| Other firewall brands | Ask us about your firewall |
Stop the next one at your own firewall.
60-day full-platform trial. No credit card. No inbound firewall changes. Live in under an hour.