{"id":1079,"date":"2020-05-29T11:04:48","date_gmt":"2020-05-29T10:04:48","guid":{"rendered":"https:\/\/42crdev.prexihost.com\/?p=1079"},"modified":"2023-02-15T16:39:20","modified_gmt":"2023-02-15T16:39:20","slug":"tutorial-api-firewall-protection","status":"publish","type":"post","link":"https:\/\/staging2022.42crunch.com\/tutorial-api-firewall-protection\/","title":{"rendered":"API Protect Micro API Firewall"},"content":{"rendered":"\n\n\t<p>Tutorials<\/p>\n\n\t<section>\n<section>\n<p>In previous tutorials, we have covered static analysis with the API security audit, dynamic testing with conformance scan &#8211; now it&#8217;s time to discuss protection. The Protection function is real-time protection of live APIs.<\/p>\n<\/section>\n<\/section>\n\t<iframe loading=\"lazy\" width=\"1110\" height=\"624\" src=\"https:\/\/www.youtube.com\/embed\/U-y_9StHmPQ\" title=\"YouTube video player\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen><\/iframe>\n<h2>\n\t\tProtection Overview\n\t<\/h2>\n<p>You put our API firewall in the line of traffic. It&#8217;s an extremely efficient piece of software that we ship as a docker image. It&#8217;s been written in C, is highly optimized, less than 20 megabytes in size and has a sub-millisecond overhead.<\/p>\n<p>When put in the line of traffic, our API Firewall uses your secure OpenAPI definition as an allowlist and policies. Essentially, it enforces the contract on all the API calls and all the responses (data coming in, data going out). Therefore, no call with get to your code if it&#8217;s outside of your contract, and no response will get sent back if it&#8217;s not expected.<\/p>\n<p>To enable Protection, first click on Protect API.<\/p>\n\t\t\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/staging2022.42crunch.com\/wp-content\/uploads\/2022\/04\/protect-api-Custom-1024x513.png\" alt=\"protect-api (Custom)\" itemprop=\"image\" height=\"513\" width=\"1024\" title=\"protect-api (Custom)\" onerror=\"this.style.display='none'\"  \/>\n<h2>\n\t\tGenerating a Token\n\t<\/h2>\n\t<section>\n<p>Next step is to generate a token. <b>(1)<\/b>\u00a0Click on Protection Tokens &gt;\u00a0<b>(2)<\/b>\u00a0Create Token &gt;\u00a0<b>(3)<\/b>\u00a0Enter a name &gt;\u00a0<b>(4)<\/b>\u00a0Click Generate Token. (screen shot of naming).<\/p>\n<p>You then copy the token. Once you copy the token and close out the window there is no way to get the token for security reasons.<\/p>\n<\/section>\n<h2>\n\t\tDeployment Docs\n\t<\/h2>\n\t<section>\n<p>You will then need to configure your network to pass all the API calls and responses through the 42Crunch API Firewall. Click on Deploy Your APIs to follow the proper documentation related to your current deployment.<\/p>\n<\/section>\n<h2>\n\t\tNavigating the Report\n\t<\/h2>\n\t<section>\n<section>\n<p>All actual security issues are scored based on the risk involved. The greater the risk, the higher the score (priority). You can filter issues by priority or category, or view all found issues as a list. You can also search for specific issues both in &#8216;All Issues&#8217; and in each individual category.<\/p>\n<p>You can immediately start fixing issues from the priority list, or click into individual issues and remediate from there. Clicking on\u00a0<b>Go to Issue<\/b> takes you to the place in your code where the issue occurs and shows you a description and remediation recommendations.<\/p>\n<\/section>\n<\/section>\n<h2>\n\t\tWatch the 42Crunch API Firewall in Action\n\t<\/h2>\n\t<section>\n<p>Check out the demo below to see our API micro-firewall in action!<\/p>\n<\/section>\n\t<iframe loading=\"lazy\" width=\"1110\" height=\"624\" src=\"https:\/\/www.youtube.com\/embed\/yjqKKiT6WHc\" title=\"YouTube video player\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen><\/iframe>\n\n","protected":false},"excerpt":{"rendered":"<p>An overview of API protect &#8211; a Micro-Firewall that provides runtime API security protection and policy enforcement and how to set it up.<\/p>\n","protected":false},"author":4,"featured_media":12267,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"none","_seopress_titles_title":"API Protect - Micro Firewall Overview","_seopress_titles_desc":"An overview of the API protect - a Micro-Firewall that provides runtime API security policy enforcement - and how to set it up.","_seopress_robots_index":"","site-sidebar-layout":"default","site-content-layout":"default","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"disabled","ast-hfb-above-header-display":"disabled","ast-hfb-below-header-display":"disabled","ast-hfb-mobile-header-display":"disabled","site-post-title":"disabled","ast-breadcrumbs-content":"disabled","ast-featured-img":"disabled","footer-sml-layout":"disabled","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[11],"tags":[22,16,33],"class_list":["post-1079","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tutorials","tag-api-security-platform","tag-api-security-training","tag-api-protection"],"_links":{"self":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/posts\/1079"}],"collection":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/comments?post=1079"}],"version-history":[{"count":0,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/posts\/1079\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/media\/12267"}],"wp:attachment":[{"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/media?parent=1079"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/categories?post=1079"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/staging2022.42crunch.com\/wp-json\/wp\/v2\/tags?post=1079"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}