How to identify rate limiting from technical perspective - WAAS - OWASP API Top 10

SMutlu — Thu, 25 May 2023 08:54:25 GMT

Hi All,

I saw that, WAAS have new feature for detect risk path from WASP API Top 10 list, but there is no any details about detection mechanism and request/response details. It only shows as risky but I need more details to understand alarms are f/p or not.

As WAAS haven't scan the API definitions, how does prisma cloud compute detect API rate limiting capabilities from technical perspective?

How can I investigate the case or traffic that identifies as WASP API Top 10 risk on paths that are found to be risky?

Kind Regards

@EGunay

Re: How to identify rate limiting from technical perspective - WAAS - OWASP API Top 10

stumiki — Thu, 22 Jun 2023 18:56:48 GMT

Please review the article shared - https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/waas/waas_dos_protection

topic Re: How to identify rate limiting from technical perspective - WAAS - OWASP API Top 10 in Prisma Cloud Discussions

How to identify rate limiting from technical perspective - WAAS - OWASP API Top 10

Re: How to identify rate limiting from technical perspective - WAAS - OWASP API Top 10