You're almost there! Please answer a few more questions for access to the Applications content. Complete registration
Interested in joining? Complete your registration by providing Areas of Interest here. Register

WAF body inspection and proection capabilities comparision

in Database 16 comments

Hi Team,

We need your guidance on the following two points:

  1. Is Request Body Inspection mandatory?

Our architecture is as follows:

OCI WAF policy attached to an OCI Public Load Balancer.
ORDS running in standalone mode, acting as the application server.
Oracle Base Database as the database server with Oracle APEX installed.

Could you please advise whether Request Body Inspection is mandatory for this architecture, and what the security implications would be if it is disabled or selectively excluded for specific APEX/ORDS requests?

  1. Additional Recommended WAF Capabilities

Currently, our WAF policy has 20 protection capabilities configured, which were originally selected from the Recommended capability set during implementation.

Tagged:

Howdy, Stranger!

Log In

To view full details, sign in.

Register

Don't have an account? Click here to get started!