Help Center/ Web Application Firewall/ FAQs/ About WAF/ What Are the Differences Between the Web Tamper Protection Functions of WAF and HSS?
Updated on 2024-06-07 GMT+08:00

What Are the Differences Between the Web Tamper Protection Functions of WAF and HSS?

The web tamper protection function of HSS monitors website directories in real time, backs up files, and restores tampered files using the backup, protecting websites from tampering. This function is helpful for governments, educational institutions, and enterprises.

WAF protects user data on the application layer. It supports cache configuration on static web pages. When a user accesses a web page, the system returns a cached page to the user and randomly checks whether the page has been tampered with.

Differences Between the Web Tamper Protection Functions of HSS and WTP

Table 1 describes the differences

Table 1 Differences between the web tamper protection functions of HSS and WTP

Item

HSS

WAF

Static web page protection

Locks files in driver and web file directories to prevent attackers from tampering with them.

Caches static web pages on servers.

Dynamic web page protection

  • Dynamic WTP

    Protects your data while Tomcat is running, detecting dynamic data tampering in databases.

  • Privileged process management

    Allows privileged processes to modify web pages.

No

Backup and restoration

  • Active backup and restoration

    If WTP detects that a file in the protection directory is tampered with, it immediately uses the backup file on the local host to restore the file.

  • Remote backup and restoration

    If a file directory or backup directory on the local server becomes invalid, you can use the remote backup service to restore the tampered web page.

No

Suitable for

Websites that have high security requirements and difficult to be manually recovered

Websites that only require application-layer protection

Purchase Suggestion

Website

Service

Common websites

WAF web tamper protection + HSS enterprise edition

Websites that require strong protection and anti-tampering capabilities

WAF web tamper protection + HSS WTP