# Does HAProxy come with a WAF, or do I need to bolt one on separately?

We want application protection to be part of the traffic layer without creating another complicated
integration. Is WAF functionality built in, and what kinds of threats and policies can it handle?

##### Post Metadata
- Posted at: 21 days ago
- Net upvotes: 2


## Comments
### Comment 1

It is built in. The HAProxy Enterprise load balancer includes a high-performance WAF that runs inline in the load balancer itself, so you inspect and filter traffic without a separate appliance and an extra network hop. It runs on the Intelligent WAF Engine, which uses non-signature-based detection instead of the static rule lists and regex signatures that traditional WAFs depend on. That means it catches emerging and zero-day threats with high accuracy and very low latency, and there are no signature lists to maintain. It also uses a multi-engine approach, pairing that engine with an optional OWASP Core Rule Set compatibility mode for teams that want rule-based OWASP Top 10 coverage. Even in that mode it is faster and more accurate than a standard ModSecurity deployment, with a fraction of the false positives. Infobip, for example, uses it to protect their public APIs and user portal.
Learn more on our web application firewall solution page - https://www.haproxy.com/solutions/web-application-firewall

##### Comment Metadata
- Posted at: 20 days ago




## Related Product
[HAProxy](https://www.g2.com/products/haproxy/reviews)

## Related Category
[Load Balancing](https://www.g2.com/categories/load-balancing)

## Related discussions
- [How well does Trello scale into a larger team?](https://www.g2.com/discussions/1-how-well-does-trello-scale-into-a-larger-team)
  - Posted at: over 13 years ago
  - Comments: 6
- [Can we please add a new section](https://www.g2.com/discussions/2-can-we-please-add-a-new-section)
  - Posted at: over 13 years ago
  - Comments: 0
- [Quantifiable benefits from implementing your CRM](https://www.g2.com/discussions/quantifiable-benefits-from-implementing-your-crm)
  - Posted at: over 13 years ago
  - Comments: 4