Monitoring, Alerting for OCI WAF and Load Balancer
Hi Team,
Recently, we came across a security incident in an on-premises environment where the infrastructure team reviewed the firewall logs and reported that the firewall had been compromised. I am not sure how the compromise was identified, but this made me think about how we can detect and investigate similar security incidents in OCI.
In our OCI environment, we do not have a dedicated network firewall appliance for the application. We are using an OCI WAF policy attached to the Load Balancer.
I would like to understand the following:
- WAF security events: What types of security events should we monitor and configure alerts for?
Tagged:
0