Protect Your Business with Security Automation

Security automation allows organizations to streamline repetitive and time-consuming tasks, manage their security posture, and scale their operations.

Last updated

View as Markdown Agent setup

As cyber threats grow more sophisticated, security automation has become essential for organizations to streamline repetitive and time-consuming tasks, manage their security posture, and scale their operations effectively.

In this context, autonomous systems operate with minimal or no human intervention, using artificial intelligence (AI) and security automation to detect, prevent, and respond to threats. Implementing these systems offers the following benefits:

  • Real-time threat detection through advanced AI algorithms.
  • Continuous self-improvement and learning by AI and automated systems.
  • Improved scalability to efficiently handle large volumes of data and events.
  • Automated responses based on predefined behaviors and rules to mitigate threats.
  • Predictive analytics to anticipate and address potential security risks.
  • Enhanced operational efficiency with minimal intervention, reducing human error.
  • Protection against increasingly sophisticated threats like phishing, malware, prompt injection, adversarial manipulation, and data leaks in modern applications.

Security Automation Architecture Diagram

Azion Security Automation Architecture Diagram

Security Automation Dataflow

  1. A request reaches Azion Web Platform and is redirected to the healthier edge node.
  2. In the edge node, Firewall processes the request and executes the security configurations:
  • DDoS Protection checks for potential DDoS or DoS attacks, blocking or allowing the request accordingly. It’s automatically enabled in all accounts.
  • Firewall Rules Engine identifies if there are rules from WAF and Network Shield, and executes the corresponding behaviors.
  • Any configured and instantiated function is executed. Read more on how to automate security with Azion Functions.
  • Bot Manager also analyzes the request using machine learning, intent-based behavioral analysis, and advanced algorithms.
  1. If the request doesn’t match a Firewall rule and isn’t blocked, the request continues the flow to Application.
  • Application Rules Engine identifies if there are rules related to caching, image optimization, cookies, and redirects, among others.
  1. The request only reaches the origin in case the edge node doesn’t contain the required response, after passing all the implemented security policies.
  2. The system responds to the request accordingly.
  3. Customers can monitor traffic and refine configurations, rules, and automation through Azion interfaces: Console, API, or CLI.

Components

  • Azion interfaces: Console, API, or CLI.
  • Firewall: provides main settings to set up your instance, enabling you to associate it with domains and activate modules to protect users, applications, and networks.
    • DDoS Protection detects and mitigates DDoS and DoS attacks.
    • Firewall Rules Engine allows you to define the conditions (Criteria) and actions (Behaviors) for your rules. If the Criteria are met, the Behaviors will be executed.
    • Firewall Functions are JavaScript functions that run at the edge of the network, close to users, and help secure your applications by applying the logic your business requires.
    • Bot Manager identifies and classifies the request according to the intent-based behavioral analysis. This add-on is Azion’s comprehensive solution for bot management. A lite version integration is also available in the Marketplace.

Implementation

  1. Create an application.
  2. Configure a firewall.
  3. Define all your rules and configurations:
  • Rules Engine rules, using criteria and behaviors to define how the request is handled. It includes rules related to network lists, WAF Rules, Custom Allowed Rules, rate limits, custom responses, blocking and dropping requests, and run functions.
  • Functions, creating your own code or using Marketplace Firewall integrations.
  1. Enable Bot Manager:
  • Contact the Sales team for more details about the Bot Manager subscription.
  • Configure Bot Manager Lite if you’ve decided to use this version.

When saved, configurations are replicated across all edge nodes in the network. Whenever a request reaches Azion’s platform, the rules and configurations are executed, and the system processes the request accordingly. You can use Observe products to monitor and track traffic.

You can also use Azion Terraform provider for security automation tasks.