Stop attackers before they strike
Fastly's Network Learning Exchange (NLX) proactively identifies and flags malicious IP addresses, allowing organizations to take action before any damage is inflicted. Leveraging insights from the NLX, which preemptively flags 54% of attack traffic, Fastly provides a preemptive security layer for its Next-Gen WAF customers. This preemptive approach offers visibility at scale into global attack landscapes, enabling organizations in various industries to defend against malicious actors before they can strike.
Creating preemptive security layers
Built on Fastly's patented Next-Gen WAF technology, NLX protects over 90,000 applications and inspects 4.1 trillion customer requests monthly. The process involves parsing incoming requests to distinguish between legitimate and malicious traffic. Once an IP crosses a predefined attack threshold, it is added to the NLX feed for consideration. Any subsequent visits by this IP to other Fastly Next-Gen WAF customers' applications trigger a signal to identify potentially malicious intent, empowering customers to set custom rules for blocking, limiting, or monitoring the IP.
Engage emerging threats
NLX allows security practitioners to engage with emerging threats through powerful signals that enhance visibility and enable the creation of custom rulesets. By applying the SIGSCI-IP signal to flagged IPs, organizations can automatically block access, rate limit traffic, or notify security personnel for monitoring. These signals, when combined, offer layered rulesets that adapt to evolving threats, providing flexibility in traffic management while ensuring the highest level of security.
Act on trusted intelligence
NLX leverages Next-Gen WAF's SmartParse technology to ensure highly accurate insights without the need for manual interpretation. By signaling IPs as malicious, organizations can confidently automate traffic decisions and make impactful choices swiftly. Unlike traditional IP reputation tools, NLX's trusted signals facilitate faster decision-making, saving valuable time for security practitioners and boosting overall security efficacy.
Expedite legitimate traffic
Through NLX's dynamic 24-hour flags on IPs, legitimate traffic is expedited while potentially malicious activities are mitigated. By timeboxing signals, Fastly's NGWAF ensures that previous actions of flagged IPs do not impact genuine user interactions. This dynamic signal approach helps protect brands and enhances customer experience by allowing legitimate requests to continue unhindered after the removal of malicious IP flags.
The preemptive layer of application security
Fastly's Network Learning Exchange (NLX) provides a preemptive security layer that seamlessly integrates with the Next-Gen WAF's Layer 7 protection. Included in all Next-Gen WAF packages, NLX offers modern IP reputation intelligence that empowers organizations to defend against threats proactively. Contact Fastly to learn more about NLX and enhance your web application and API protection strategies.