DEV Community

Lulu
Lulu

Posted on

How to Enable Dynamic Protection in SafeLine WAF for Enhanced Security

Introduction

Dynamic Protection is an exciting new feature introduced in version [6.0.0] of the SafeLine WAF Community Edition. As part of advanced site protection, this feature is designed to automatically encrypt the HTML and JavaScript source code of websites dynamically. The goal is to prevent analysis by web crawlers and automated attack tools, significantly enhancing your website's security.

Though still in its BETA phase in version [6.0.0], Dynamic Protection is available for users to test and experience. The feature is powered by the newly added safeline-chaos container, which processes the website's source code, applying encryption techniques that make it difficult for automated tools to mimic normal user behavior.

Website:https://waf.chaitin.com
Demo:https://demo.waf.chaitin.com:9443

Dynamic Protection Overview

  • Dynamic Protection (BETA): Automatically encrypts HTML and JavaScript source code to prevent analysis by web crawlers and automated attack programs.
  • New Container: The safeline-chaos container supports the Dynamic Protection feature, adding an extra layer of security.

Activation Tutorial

1.Upgrade SafeLine WAF

Ensure that your SafeLine WAF is updated to the latest version to access the Dynamic Protection feature.

Image description

2.Accessing Dynamic Protection

Navigate to "Web Services", then "Web Services", and click on "DYNAMIC" under the relevant site.

Image description

3.Enabling Dynamic Protection

A popup will appear after you click on "DYNAMIC". Check the recommended options and click SAVE.

Image description

4.Verification

After saving, the Dynamic Protection button will turn green, indicating that it is successfully enabled.

What to Expect

Once Dynamic Protection is activated, you will notice SafeLine WAF decryption prompts when accessing the website's backend management. This feature notifies website administrators that Dynamic Protection is active, providing peace of mind that the website is shielded from automated threats.

Image description

Top comments (0)