This is the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

How-to guides

Users can apply for the service by entering the required information for using the WAF service through the Samsung Cloud Platform Console.

WAF Apply

You can apply for and use the WAF service from the Samsung Cloud Platform Console.

To request WAF service creation, follow the steps below.

  1. All Services > Security > WAF Click the menu. Navigate to the WAF’s Service Home page.

  2. On the Service Home page, click the WAF Service Request button. Navigate to the Support Center > Service Request List > Service Request page.

  3. Service Request page, please enter or select the relevant information in the required input fields.

    • Select WAF creation in the task category.
      Input ItemDetailed Description
      TitleEnter the title of the service request content
      • Example: WAF service creation request
      RegionSelect the location of Samsung Cloud Platform
      • Automatically filled with the region corresponding to the Account
      ServiceSelect service category and service. If the WAF service request button is pressed, it is entered automatically
      • Service Category: Security
      • Service: WAF
      Task CategorySelect the type you want to request
      • WAF creation: select when requesting a new service
      ContentGuidance on creating and applying basic customer information
      • Content to be written: End customer/MSP information
      AttachmentUpload the completed WAF service application (required) and any additional files you wish to share
      • Each attached file must be within 5MB, up to a maximum of 5 files can be attached
      • Only doc, docx, xls, xlsx, ppt, ppts, hwp, txt, pdf, jpg, jpeg, png, gif, tif files can be attached
      Table. WAF Service Creation Request Items
  4. After checking the application process and reference information, click the Form Download > Service Request Form Download button to download the WAF Service Application Form.

  5. WAF Service Application Form please fill out.

    • Refer to the item descriptions in the Application Information and Control Information tabs, and fill out the required fields.
      CategoryDetailed Content
      Application InformationWrite required items such as application type, usage period, throughput information, basic information, etc.
      Monitoring InformationWrite required items such as WAF service application information, SSL certificate information, etc.
      • Public sector customers do not need to fill out
      Table. Main contents of WAF service creation application form
  6. Attach the completed application form in the attachment area.

  7. On the service request page, click the Request button.

    • When the application is completed, check the requested content on the Support Center > Service Request List page.
  8. After the monitoring officer verifies the submitted service request, the process for using the service proceeds.

  9. WAF service will be launched.

WAF Cancel

To request termination of the WAF service, follow the steps below.

  1. All Services > Management > Support Center Click the menu. Support Center > Service Home Go to the page.
  2. Click the Service Request button on the Support Center Service Home page. You will be taken to the Service Request List page.
  3. Service Request List page, click the Service Request button. It navigates to the Service Request page.
  4. Service Request page, please enter or select the relevant information in the required input fields.
    • Select WAF termination in the work classification.
      Input ItemDetailed Description
      TitleEnter the title of the service request content
      • Example: WAF service termination request
      RegionSelect the location of Samsung Cloud Platform
      • Automatically filled with the region corresponding to the Account
      ServiceSelect service category and service
      • Service Category: Security
      • Service: WAF
      Task CategorySelect the type you want to request
      • WAF termination: select if you are terminating the service
      ContentGuidance on creating and applying basic customer information
      • Content to be written: End customer/MSP information
      AttachmentUpload the completed WAF service application (required) and any additional files you wish to share
      • Each attached file must be within 5 MB, up to a maximum of 5 files can be attached
      • Only doc, docx, xls, xlsx, ppt, ppts, hwp, txt, pdf, jpg, jpeg, png, gif, tif files can be attached
      Table. Table. WAF service termination request items
  5. After checking the Application Process and Reference Information, click the Form Download > Service Request Form Download button to download the WAF Service Application Form.
  6. WAF Service Application Form please fill out.
    • Refer to the item descriptions in the Application Information and Control Information tabs, and fill out the required items.
      CategoryDetailed Content
      Application InformationApplication type, usage period, processing amount information, basic information, etc. Fill in required items
      Control InformationWhen terminating the entire service, no input is required
      Table. Main contents of WAF service termination application form
  7. Please attach the completed application form to the attachment area.
  8. On the service request page, click the Request button.
    • When the application is completed, check the submitted details on the Support Center > Service Request list page.
  9. After the monitoring officer verifies the submitted service request, if the monitored URL, Port, and IP are deleted, the termination process is completed.
    • Service termination takes 3 business days, counting from the cancellation request date.

1 - WAF Construction Process Guide

To initiate the WAF service, a license installation and control system connection check are required after applying for the service. If you apply for the WAF service, the person in charge will contact you after checking the service request details. Refer to the process below to apply for the WAF service.

Notice

WAF installation is directly supported by SDS engineers, and it proceeds after discussing the configuration/specifications with the customer company.

  • Please apply for the service at least 1 month before the minimum service opening date (based on business days) considering the entire process schedule.
Configuration
Figure. WAF construction process

1. Preparatory Work

The preliminary preparation work for using the WAF service will proceed according to the following procedure.

  1. Apply for WAF installation as a service request.(MSP → SDS)
  2. Request WAF SW installation.(SDS → Engineer)
  3. Please provide engineer information for WAF installation work.(SDS → MSP)

2. Samsung Cloud Platform Console work (MSP performance)

To use the WAF service, the following work is done in the Samsung Cloud Platform Console.

  1. Register the SSL certificate in the Certificate Manager service.
  • Application path: Samsung Cloud Platform Console > Security > Certificate Manager
  • Purpose: Operation
  1. Create a Virtual Server service for WAF.
  • Application path: Samsung Cloud Platform Console > Compute > Virtual Server
  • WAF specifications determine the capacity of CPU/Memory/Block Storage
  • WAF Virtual Server specification: Check the quotation
  1. Load Balancer service should be created.
  • Application path: Samsung Cloud Platform Console > Networking > Load Balancer
  1. Create an L7 service for SSL Offloading.
  2. Create an L4 service when load balancing is needed for WAF redundancy.
  3. Create an L4 service when load balancing is needed for WEB server duplication.
  4. Set the necessary Load Balancer/Firewall/Security Group.
  • Load Balancer’s communication path should have a corresponding Firewall and Security Group set as follows.
  • The starting point is where you enter your network information.
    ClassificationCommon Security Zone FWInternet Gateway FWLoad Balancer FWVirtual Server SG
    Inbound (Destination)LB 서비스 Public IPLB 서비스 Private IPLB 서비스 Private IPLB Link IP
    IP (example)123.43.8.xxx10.10.0.xxx10.10.0.xxx192.168.254.xxx
    PortLB Service PortLB Service PortLB Service PortForward/Health Check Port
    Table. FW/SG setting items according to the communication path of Load Balancer
  1. Set the HTTP redirection of the LB service. (optional)
  • Load Balancer’s HTTP redirection item should be set as follows.
    Load Balancer ServiceL7 HTTPL7 HTTPS
    LB Profile > Profile TypeApplicationApplication
    LB Profile > Service ClassificationL7 HTTPL7 HTTP
    LB Profile > HTTP RedirectionSettingsNot Set
    IP/NAT IPset the same wayset the same way
    Service Port80443
    Transfer Port8080
    Server Group > WAF in useNot setWAF Virtual Server
    Server Group > WAF not usednot setWEB Virtual Server
    Certificate RegistrationUnregisteredRegistered
    Table. Load Balancer's HTTP redirection settings
  1. Grant WAF engineers access permission to the WAF Virtual Server.

3. WAF SW installation and testing (WAF engineer & MSP)

When the WAF specification is confirmed, the engineer installs the WAF software and proceeds with the test.

4. Policy request and reflection for WAF security monitoring

WAF security monitoring requires policies to be created and applied.

  1. Request the necessary policy from the Samsung Cloud Platform Console.(SDS → MSP)
  2. Deliver and apply the created policy.(SDS → MSP)
  3. Check the details that require policy registration.(Direct Connect Firewall/Security Group/Routing)
  • SDS → Check if the WAF access path is secured for each customer company. If additional registration is required, please request by email.
  • It checks if the log transmission path from WAF to SIEM is secured for each client company. If additional registration is required, please request by email.

Limitations

WAF installation, check the following restrictions first and proceed.

  • When WAF is configured alone, service continuity cannot be guaranteed in case of WAF installation Virtual Server or WAF application failure (Samsung Cloud Platform LB and WAF do not support bypass)
  • If the service availability of the WAF-applied target website is important, WAF duplication application is required. If WAF duplication application is required, it must be requested separately.
  • Samsung Cloud Platform service provides security monitoring through Pentasecurity products only.
  • Other vendor products are registered in the marketplace, but the SamsungSDS security management service is not provided.