> ## Documentation Index
> Fetch the complete documentation index at: https://docs.onefirewall.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Web Attack Filter

<img src="https://mintcdn.com/onefirewall/WDi-dI7jVFz2iVVH/images/onefirewa-waf-trans.webp?fit=max&auto=format&n=WDi-dI7jVFz2iVVH&q=85&s=f869c16947ef4125d8e5320e16ce3e79" alt="" width="990" height="541" data-path="images/onefirewa-waf-trans.webp" />

# Web Application Firewall

## Overview

**OneFirewall-WAF** (Web Attack Filter) is a Web Application Firewall built by **OneFirewall Alliance LTD**. It protects web applications by combining real-time threat intelligence with rule-based filtering.

***

## Core Capabilities

### Real-Time Threat Prevention

Uses OneFirewall's threat intelligence to block malicious actors before they can exploit your application.

### Multi-Layer Protection

Protects your app at multiple levels:

* TCP/IP DDoS mitigation
* Rule engine built on ModSecurity
* Rate limiting per URI
* Custom signature injection

### Deployment Options

* **Managed by OneFirewall** (hosted on OneFirewall's cloud)
* **Self-managed by customer** (on-premises or private cloud)

### Dashboard

Real-time dashboard for threat insights, traffic patterns, and rule analytics, with unlimited user access.

***

## Core Features

| Feature                 | Description                                                                |
| ----------------------- | -------------------------------------------------------------------------- |
| **DDoS Protection**     | Blocks volumetric and protocol-layer attacks using CDN-backed strategies   |
| **Custom Rulesets**     | Public and proprietary ModSecurity rule sets tailored for your application |
| **Threat Intelligence** | Real-time feed with updated indicators of compromise                       |
| **Rate Limiting**       | Fine-grained control to limit abusive traffic on specific endpoints        |

***

## Deployment Models

### 1. Managed by OneFirewall

* Installed and operated in OneFirewall's cloud
* 24/7 monitoring, updates, and operational responsibility

### 2. Self-Managed by Customer

* Installed and configured by OneFirewall engineers
* Customer retains control of day-to-day operations

***

## What's Included

* 1.5h expert training session
* Monthly service reviews
* Feature request program (case-by-case evaluation)
* Real-time analytics dashboard

***

## SLA Highlights (Managed Deployment)

| SLA Metric                       | Commitment                            |
| -------------------------------- | ------------------------------------- |
| **Service Functionality Uptime** | 99.99% over any 3-month period        |
| **Platform Availability**        | 99.999% online presence over 3 months |

***