Web Application Firewall Detection

info Nessus Plugin ID 41058
New! Plugin Severity Now Using CVSS v3

The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Synopsis

The remote web server is protected by a web application firewall.

Description

By analyzing error codes and messages returned from some web queries, Nessus is able to determine that the remote web server is protected by a web application firewall.

Such protection may disrupt scan results. Countermeasures have been taken to make the scan as reliable as possible.

Solution

To get a more comprehensive set of scan results, either whitelist the Nessus server's IP address or scan from an unprotected location.

Plugin Details

Severity: Info

ID: 41058

File Name: waf_detection.nbin

Version: 1.71

Type: remote

Family: Firewalls

Published: 12/10/2009

Updated: 4/20/2021

Dependencies: find_service1.nasl, httpver.nasl, http_login.nasl, broken_web_server.nasl

Asset Inventory: true

Vulnerability Information