Your achievements

Level 1

0% to

Level 2

Tip /
Sign in

Sign in to Community

to gain points, level up, and earn exciting badges like the new
BedrockMission!

Learn More

View all

Sign in to view all badges

options for integrating a bot mitigation solution such as Datadome or akamai bot manager?

Avatar

Avatar
Ignite 10
Level 4
TB3dock
Level 4

Likes

34 likes

Total Posts

203 posts

Correct Reply

4 solutions
Top badges earned
Ignite 10
Boost 25
Give Back 25
Validate 10
Validate 1
View profile

Avatar
Ignite 10
Level 4
TB3dock
Level 4

Likes

34 likes

Total Posts

203 posts

Correct Reply

4 solutions
Top badges earned
Ignite 10
Boost 25
Give Back 25
Validate 10
Validate 1
View profile
TB3dock
Level 4

16-02-2021

We have just purchased a 3 year license for AEM cloud from a partner.

 

We need to protect the key APIs and pages from Bots, to avoid brute force attacks and spam account creation etc.

 

This could be done with recapcha, but recapcha has a 10% false positive rate (on our site at least), and we want a site wide production (excecpt static assets).

 

According to the docs: "AEM as Cloud Service is shipped with a default CDN." 

 

Does anyone know which CDN this is, and if we can add "market place" apps to it?

 

Assuming that the CDN which AEM uses is closed, so we cant add bot protection, has anyone had luck putting a CDN on top of the CDN?

 

Specifically, putting the Standard Edition of Cloudflare on top of whatever CDN AEM uses, so we can integrate via cloudflares marketplace?

 

 

 

 

 

 

 

Accepted Solutions (1)

Accepted Solutions (1)

Avatar

Avatar
Validate 10
MVP
kunal23
MVP

Likes

166 likes

Total Posts

565 posts

Correct Reply

172 solutions
Top badges earned
Validate 10
Validate 1
Ignite 3
Ignite 1
Give Back 50
View profile

Avatar
Validate 10
MVP
kunal23
MVP

Likes

166 likes

Total Posts

565 posts

Correct Reply

172 solutions
Top badges earned
Validate 10
Validate 1
Ignite 3
Ignite 1
Give Back 50
View profile
kunal23
MVP

16-02-2021

Adobe uses Fastly CDN and it comes with DDOS protection. 

 

AEM as a Cloud Service also offers reliable protection against (distributed) denial-ofservice (DDoS) attacks on three different levels:
• Edge filtering all non-HTTP/HTTPS traffic to block disruptive Layer 3 and Layer 4
attacks
• Protection against generic Layer 7 threats enforced by logic running on the CDNs cache
nodes
• Additional Layer 7 filtering throughout the network stack to mitigate AEM specific
attack vectors

 

For more details please see - https://www.fastly.com/products/cloud-security/ddos-mitigation

Answers (0)