Skip to content

Commit

Permalink
Merge pull request #1540 from lvoloshyn-sekoia/feat/add_fastly_waf_docs
Browse files Browse the repository at this point in the history
Add docs for Fastly WAF
  • Loading branch information
squioc authored Apr 4, 2024
2 parents ef4d6b7 + d6ad3ee commit a4d5d42
Show file tree
Hide file tree
Showing 2 changed files with 57 additions and 0 deletions.
Original file line number Diff line number Diff line change
@@ -0,0 +1,56 @@
uuid: 916c13a8-c109-49f0-94db-d6a2300f5580
name: Fastly Next-Gen WAF
type: intake


## Overview

Fastly Next-Gen WAF is a web application firewall solution designed to protect online assets by mitigating web application threats, ensuring security, and enhancing application performance with its edge-based, real-time protection capabilities.

!!! warning
Important note - This format is currently in beta. We highly value your feedback to improve its performance.

{!_shared_content/operations_center/detection/generated/suggested_rules_916c13a8-c109-49f0-94db-d6a2300f5580_do_not_edit_manually.md!}

{!_shared_content/operations_center/integrations/generated/916c13a8-c109-49f0-94db-d6a2300f5580.md!}

## Configure

### Creating API access tokens

1. Go to the [Fastly WAF](https://dashboard.signalsciences.net) and log in.
2. From the **My Profile** menu, select API access tokens.
3. Click **Add API access token**.
4. In the **Token name** field, enter a name to identify the access token.
5. Click **Create API access token**.
6. Record the token in a secure location for your use. Then, click **Continue** to finish creating the token.

!!! Warning
This is the only time the token will be visible. Record the token and keep it secure.

### Sekoia.io configuration procedure

#### Create your intake

1. Go to the [intake page](https://app.sekoia.io/operations/intakes) and create a new intake from the `Fastly WAF`.
2. Copy the associated Intake key

#### Pull the logs to collect them on Sekoia.io

Go to the Sekoia.io [playbook page](https://app.sekoia.io/operations/playbooks), and follow these steps:

1. Click **+ PLAYBOOK** button to create a new one
2. Select **Create a playbook from scratch**
3. Give it a name in the field **Name**
4. Open the left panel, click **Fastly** then select the trigger `Fetch new events from Fastly WAF`
5. Click **Create**

6. Create a **Module configuration**. Name the module configuration as you wish.
7. Create a **Trigger configuration** using:
7.1. Type the `Intake key` created on the previous step
7.2 Enter `User's email`, `API token`, `Corporation name` and `Site name` from the Fastly WAF dashboard

- Click the **Save** button
- **Activate the playbook** with the toggle button in the top right corner of the page

#### Enjoy your events on the [Events page](https://app.sekoia.io/operations/events)
1 change: 1 addition & 0 deletions mkdocs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -125,6 +125,7 @@ nav:
- Cisco Duo Security: xdr/features/collect/integrations/cloud_and_saas/cisco_duo_security.md
- Claroty xDome: xdr/features/collect/integrations/cloud_and_saas/claroty_xdome.md
- ExtraHop Reveal(x) 360: xdr/features/collect/integrations/cloud_and_saas/extrahop_revealx_360.md
- Fastly Next-Gen WAF: xdr/features/collect/integrations/cloud_and_saas/fastly/fastly_waf.md
- Github Audit Logs: xdr/features/collect/integrations/cloud_and_saas/github_audit_logs.md
- Google Cloud:
- Google Cloud Audit Logs: xdr/features/collect/integrations/cloud_and_saas/google/google_cloud_audit.md
Expand Down

0 comments on commit a4d5d42

Please sign in to comment.