Recently there have been questions from our associates about blocking traffic from certain countries mostly driven by impact when they travel. While we use a scoring threshold using Cybersecurity Exposure Index (CEI) or National Cyber Security Index (NCSI) etc. some countries that score better should be on the list based on state sponsored activity or political turmoil. What criteria are you using for blocking traffic from countries via geo fencing? Are you documenting the criteria in a policy? Are you having challenges defending the countries on the list?
Does anyone have experience of both Azure Firewall and FortiGate NGFWs? Or tips for comparing FW offerings?
We are looking for a WAF for our new SaaS system which uses GraphQL API. The concern is that AWS WAF might not be suitable; the "free" OWASP ruleset would not suffice and custom rules means manpower investment and ongoing costs. Any experience or recommendation would be appreciated!
