diff --git a/src/content/docs/security/index.mdx b/src/content/docs/security/index.mdx index e49e7d790cfca8e..dc0ff9106e4222d 100644 --- a/src/content/docs/security/index.mdx +++ b/src/content/docs/security/index.mdx @@ -15,6 +15,7 @@ import { Feature, LinkTitleCard, RelatedProduct, + Stream, } from "~/components"; The application security dashboard is your starting point to better understand the security posture of your web applications, and to configure rules to protect them. @@ -37,6 +38,12 @@ The opt-out option will be available for a limited time. + + ## Features @@ -30,6 +31,12 @@ Get automatic protection from vulnerabilities and the flexibility to create cust Learn how to [get started](/waf/get-started/). + + --- ## Features diff --git a/src/content/stream/app-sec-dashboard/index.yaml b/src/content/stream/app-sec-dashboard/index.yaml new file mode 100644 index 000000000000000..2b4d22d71cf305e --- /dev/null +++ b/src/content/stream/app-sec-dashboard/index.yaml @@ -0,0 +1,242 @@ +--- +id: 81d50c9845612128e65bf6d04bcf9e3a +url: app-sec-dashboard +title: Application Security - Dashboard walkthrough +description: In this video, learn how to navigate the Cloudflare Application Security dashboard and how to use each page to monitor, investigate, and manage security protections. +products: + - dns +thumbnail: + url: https://pub-d9bf66e086fb4b639107aa52105b49dd.r2.dev/Application%20security%20demo.png +transcript: | + + WEBVTT + + 1 + 00:00:00.000 --> 00:00:04.560 + Cloudflare Application Security dashboard for + individual domains allows you to manage + + 2 + 00:00:04.560 --> 00:00:08.800 + application security features that protect + the domain from various web attacks and + + 3 + 00:00:08.800 --> 00:00:11.000 + threats. I'll walk you through the interface, + + 4 + 00:00:11.000 --> 00:00:15.360 + show you what goes under them and how to use + each page to monitor, + + 5 + 00:00:15.360 --> 00:00:18.200 + investigate, and manage your security + protections. + + 6 + 00:00:18.240 --> 00:00:22.800 + First, select the domain you would like to + manage your application security on. + + 7 + 00:00:23.400 --> 00:00:27.880 + Once you have selected a domain, + open up the Application Security dashboard by + + 8 + 00:00:27.880 --> 00:00:31.240 + clicking security on the navigation bar here. + + 9 + 00:00:31.240 --> 00:00:32.800 + Now on the overview page. + + 10 + 00:00:33.120 --> 00:00:37.600 + The Security Overview page gives you a high + level summary of your security posture for + + 11 + 00:00:37.600 --> 00:00:42.760 + this domain. You'll find alerts for + Misconfigurations detected threats and + + 12 + 00:00:42.760 --> 00:00:46.200 + suggested actions on how to improve your + security posture. + + 13 + 00:00:46.560 --> 00:00:50.640 + This is a good place to start and review what + needs attention across your environment. + + 14 + 00:00:50.680 --> 00:00:56.200 + Under analytics, you can analyze security + data across two different views traffic and + + 15 + 00:00:56.200 --> 00:01:01.360 + events. Use this page to understand what kind + of traffic your domain is receiving and how + + 16 + 00:01:01.400 --> 00:01:05.580 + Cloudflare is securing your domain based on + the detection tools that are enabled. + + 17 + 00:01:06.020 --> 00:01:11.100 + This page also serves as a starting point to + identify how you may want to configure your + + 18 + 00:01:11.100 --> 00:01:15.300 + application security settings based on the + patterns of traffic you're receiving. + + 19 + 00:01:15.340 --> 00:01:19.300 + The traffic tab shows data on incoming HTTP + requests to your domain, + + 20 + 00:01:19.300 --> 00:01:23.220 + including ones that have not been affected by + any security tools. + + 21 + 00:01:23.260 --> 00:01:27.480 + The events tab shows data on security actions + that have been performed by Cloudflare + + 22 + 00:01:27.480 --> 00:01:29.700 + Security tools on incoming requests. + + 23 + 00:01:29.860 --> 00:01:35.180 + Under web assets, you can manage and monitor + the security of various types of web related + + 24 + 00:01:35.180 --> 00:01:40.860 + assets. For example, use the endpoints tab to + get recommendations and insights about your + + 25 + 00:01:40.860 --> 00:01:45.540 + endpoint usage. Use the Schema Validation tab + to protect your origin from invalid API + + 26 + 00:01:45.540 --> 00:01:47.260 + requests and malicious payloads. + + 27 + 00:01:47.500 --> 00:01:52.100 + Schema validation works by validating + requests against your own API schema. + + 28 + 00:01:52.140 --> 00:01:56.540 + The Client Side Resources tab is used to + monitor resources such as scripts, + + 29 + 00:01:56.540 --> 00:02:01.380 + connections, and cookies that are running on + your visitor's web browsers for your domain. + + 30 + 00:02:01.380 --> 00:02:05.090 + If you notice unexpected scripts or + connections on the dashboard. + + 31 + 00:02:05.130 --> 00:02:07.730 + Check them here for signs of malicious + activity. + + 32 + 00:02:07.770 --> 00:02:11.610 + Security rules is where you manage and define + what security actions are. + + 33 + 00:02:11.610 --> 00:02:13.450 + Perform on incoming requests. + + 34 + 00:02:13.490 --> 00:02:15.290 + Under the Security Rules tab. + + 35 + 00:02:15.330 --> 00:02:18.770 + You can manage and create different types of + rules to secure your domain. + + 36 + 00:02:18.810 --> 00:02:23.650 + You can create your own custom security rules + from scratch or use predefined templates to + + 37 + 00:02:23.690 --> 00:02:26.930 + help you get started. Under the DDoS + protection tab, + + 38 + 00:02:26.930 --> 00:02:30.890 + you'll find a DDoS rulesets that mitigate + DDoS attacks on your domain. + + 39 + 00:02:30.930 --> 00:02:35.050 + The DDoS Attack Protection rule sets are + automatically managed and updated by + + 40 + 00:02:35.050 --> 00:02:39.650 + Cloudflare, so you only need to use this tab + if you want to create an override rule that + + 41 + 00:02:39.650 --> 00:02:42.410 + changes how Cloudflare DDoS protection + functions. + + 42 + 00:02:42.450 --> 00:02:46.770 + In settings, you can configure Cloudflare + detection tools and your domain security + + 43 + 00:02:46.770 --> 00:02:52.090 + posture. Security settings and detection + tools are categorized by the type of threat + + 44 + 00:02:52.130 --> 00:02:53.690 + they detect and mitigate. + + 45 + 00:02:53.850 --> 00:02:57.570 + Use the filters on this page to find + detection tools and settings that are + + 46 + 00:02:57.570 --> 00:02:59.490 + relevant to your security needs. + + 47 + 00:02:59.690 --> 00:03:01.290 + Thank you for choosing Cloudflare. + + 48 + 00:03:01.330 --> 00:03:04.930 + For more information, + please refer to our developer documentation. \ No newline at end of file