Today we are announcing the Early Access availability of Barracuda Web Application Firewall 12.0. This latest version introduces many new capabilities and upgrades to the product. Detailed release notes are available on Campus at https://campus.barracuda.com/doc/30114094/

Some interesting product capabilities being introduced in this release include ...

• GraphQL Security: Barracuda WAF now provides native parsing, security, and delivery of applications with GraphQL APIs. GraphQL is an open-source data query and manipulation language for APIs, and a runtime for fulfilling queries with existing data.

• Automated API discovery: Automatic discovery for API endpoints and structure learning – Automatic API discovery provides administrators, an automated discovery of the API endpoints and hence helps in learning of the API structure, facilitating configuring API security with ease. The feature is available for systems with an active ATI subscription.

• Account Takeover Protection: Account profiling has been integrated as a part of Privileged account protection feature-set. Account profiling helps in creating a profile of the respective account based on various parameters and helps administrator to define binding policies.

• Ability to tune Client-Side Protection policy from ATI dashboard: The ATI dashboard now has integrated configurable elements for better visibility and control over CSP policy violations.

• Block requests based on ASN - Barracuda WAF now allows users to block requests based on their Autonomous System Numbers (ASN). You can configure ASNs at the application layer IP Reputation and block the request originating from those ASNs.