Layer7 API Management

Expand all | Collapse all

Can you put API Gateway behind WAF?

  • 1.  Can you put API Gateway behind WAF?

    Posted 01-10-2019 10:53 AM

    Is it possible to put CA API Gateway go through WAF?

    What are the limitations/drawbacks of doing this, if any?



  • 2.  Re: Can you put API Gateway behind WAF?

    Broadcom Employee
    Posted 01-10-2019 01:29 PM

    Good morning,

     

    You can place WAF in front of the gateway if required for your setup. The main piece that will stop working is client mutual authentication. What feature of a WAF do you need that the gateway does not provide?

     

    Sincerely,

     

    Stephen Hughes

    Broadcom Support



  • 3.  RE: Can you put API Gateway behind WAF?

    Posted 05-05-2021 04:06 AM
    Hi,

    other things to consider is that the client IP and port that arrive to the GW are not the real requestor ones but could be the WAF ones. Usually WAF can set the X-Forwarded-for header to solve this.
    It would be nice to share more details if someone had experience in similar situations.

    Bye

    ------------------------------
    Enzo Fusca
    ------------------------------