WAF Gateway Roadmap June 2020 Eyal Gur Product

WAF Gateway Roadmap - June 2020 Eyal Gur Product Manager Eyal. Gur@imperva. com

Disclaimer This presentation is being provided for INFORMATIONAL PURPOSES ONLY. The information provided represents Imperva’s expectations as of the date the presentation was prepared. Imperva undertakes no obligation to update or revise this information. The information should not be construed as a commitment to deliver any specific upgrade or feature or functionality. Imperva may change the contents of the presentation in its sole discretion at any time. You should not rely on the anticipated timelines or potential upgrades, features or functionality described in the presentation when making a decision to purchase products from Imperva. 2

Agenda Slide Dark Topic Next Generation Reverse Proxy (NGRP) Reputation Intelligence Management for large scale Advanced Bridge GCP WAF GW Health Monitoring Advanced BOT Protection What else is coming? (2021) 3 Proprietary and confidential. Do not distribute.

4 Secure. Sphere WAF �� WAF Gateway

WAF GW - Main Focus Areas Product Enhancement • • Reduce TCO managing large environments Improve performance Security • • • 5 Proprietary and confidential. Do not distribute. Coverage & Automation • Additional API Coverage • Support GCP Additional auditing for Compliance • HTTP 2 Advanced Bot protection • Dockers Supporting advanced ciphers & TLS 1. 3

Next Generation Reverse Proxy • New reverse proxy Engine replacing KRP (as of V 14. 1) • Enhanced security – Supports many additional advanced ciphers 6 Proprietary and confidential. Do not distribute.

Reputation Intelligence • Ability to launch Reputation Intelligence from WAF GW • Use it to check an IP and decide on way of action • Roadmap – add capability to automate WAF GW policy from Attack Analytics <Demo> 7 Proprietary and confidential. Do not distribute.

Additional API Coverage Action Set – send Email Get License information Schedule reports Get/Set/Run reports GET XML Parsing definitions from the service Get all Web Security policies by origin Proprietary and confidential. Do not distribute. Add/Update/Delete (generic/sensitive data) dictionary groups in global objects Copy a policy (specifically ADC policy) Update priority of outbound RP rule Get Blocked Sources Release Blocked Sources

Management for large scale • Lower TCO - Allow one MX to manage more than 200 GWs • Focus MX on configuration, administration and health monitoring • Offload event handling from MX to SIEM and Attack Analytics <Demo> 9 Proprietary and confidential. Do not distribute.

Advanced Bridge • The next generation of TRP • Transparent migration from TRP • Migration tool from Bridge • Enhanced security - Supports advanced ciphers (as seen in NGRP) 10 Proprietary and confidential. Do not distribute.

WAF GW on GCP • Running WAF GW on Google Cloud • AWS & Azure already supported 11 Proprietary and confidential. Do not distribute.

WAF GW Health Monitoring– Available now ! • Collects WAF GW performance counters: CPU, CPS, Throughput and many more. . . • Output into “New Relic” or into SIEM via syslog output (in JSON format) • Supports Grafana Dashboard (open source) https: //github. com/imperva/mx-toolbox/tree/master/performance-monitoring 12 Proprietary and confidential. Do not distribute.

WAF GW Health monitoring - Demo 13 Proprietary and confidential. Do not distribute.

Advanced BOT Protection – Q 2 2021 • Full BOT Protection in WAF GW • Launching Advanced BOT Administration & configuration from WAF GW • New Policy in WAF GW for Advanced BOT • Alerts • Followed Actions • Will be supported in the NGRP & Advanced Bridge implementation modes 14 Proprietary and confidential. Do not distribute.

What else is coming in 2021? 15 • HTTP/2 (Q 2 2021) • TLS 1. 3 (Q 2 2021) • Policy Tuning (Q 4 2021) • WAF GW on Dockers (Q 4 2021) Proprietary and confidential. Do not distribute.

Q&A 16 Proprietary and confidential. Do not distribute.

Thank You! Eyal Gur Product Manager Eyal. Gur@imperva. com