Contents
Is there a WAF solution for Sitecore CMS implementation?
We are looking for a Web Application Firewall (WAF) solution for our Sitecore CMS implementation, because we are an Azure shop we specifically wanted to use the WAF feature on the Azure AppGateway resource. Per Sitecore’s knowledge base article, it appears that this is not a supported feature. https://kb.sitecore.net/articles/682999
Can you fix Azure WAF with Sitecore 9.1?
Imp: Sitecore 9.1 won’t magically fix it as MS itself is struggling to expose variables to customize Azure WAF parameters. so we disabled this rule and the ones below. Keep in mind that ‘post’ goes through a log checking of its content (body), especially if there is a form that accepts upload (pdf or pics).
What does Sitecore Experience Platform ( XP ) do?
Sitecore Experience Platform A powerful content management system (CMS) is just the start. Sitecore Experience Platform™ (XP) also combines customer data, analytics, AI, and marketing automation capabilities to nurture customers throughout their journey with personalized content in real-time, across any channel.
Is there a work around for WAF in azure?
Below are the list of OWASP rules that are causing problems, and as you can see there are two that cannot be disabled so we there is no work around for WAF right now. We tried WAF prevention mode in 9.0.2 (9.0.1 should also work) and made it work in the end.
Can you use Sitecore as a headless CMS?
You can’t test, optimize, personalize, or market in context with a headless CMS and the apps they enable. With Sitecore, however, you can have it both ways—you can use Sitecore to power apps or power a digital experience.
Can a CDN have nothing to do with Sitecore?
It truly depends on how the CDN is setup. The way we have done it is that its transparent and has nothing to do with Sitecore. If an image/asset (js/css/docs) are requested by the end user, the first request goes to Sitecore and the subsequent requests go to the CDN.