Layer7 API Management

  • Private Community

  • 1.  Can you put API Gateway behind WAF?

    Posted Jan 10, 2019 10:53 AM

    Is it possible to put CA API Gateway go through WAF?

    What are the limitations/drawbacks of doing this, if any?



  • 2.  Re: Can you put API Gateway behind WAF?

    Broadcom Employee
    Posted Jan 10, 2019 01:29 PM

    Good morning,

     

    You can place WAF in front of the gateway if required for your setup. The main piece that will stop working is client mutual authentication. What feature of a WAF do you need that the gateway does not provide?

     

    Sincerely,

     

    Stephen Hughes

    Broadcom Support



  • 3.  RE: Can you put API Gateway behind WAF?

    Posted May 05, 2021 04:06 AM
    Hi,

    other things to consider is that the client IP and port that arrive to the GW are not the real requestor ones but could be the WAF ones. Usually WAF can set the X-Forwarded-for header to solve this.
    It would be nice to share more details if someone had experience in similar situations.

    Bye

    ------------------------------
    Enzo Fusca
    ------------------------------

    Original Message