{"id":657,"date":"2026-11-10T17:26:59","date_gmt":"2026-11-10T14:26:59","guid":{"rendered":"https:\/\/turkishost.com\/blog\/?p=657"},"modified":"2026-11-13T15:18:03","modified_gmt":"2026-11-13T12:18:03","slug":"waf-nedir","status":"publish","type":"post","link":"https:\/\/turkishost.com\/blog\/waf-nedir\/","title":{"rendered":"WAF Nedir, Ne \u0130\u015fe Yarar?"},"content":{"rendered":"<div class=\"one-cikan-noktalar\" style=\"background-color: #f8fafc; border: 1px solid #e2e8f0; border-left: 5px solid #0056b3; border-radius: 8px; padding: 25px; margin: 30px 0; font-family: sans-serif;\">\n<p style=\"color: #0f172a; font-size: 22px; font-weight: bold; margin-top: 0; margin-bottom: 8px; display: flex; align-items: center; gap: 10px;\"><span style=\"color: #0056b3; font-size: 20px;\">\ud83d\udccc<\/span> \u00d6ne \u00c7\u0131kan Noktalar<\/p>\n<p style=\"color: #475569; font-size: 16px; margin-bottom: 20px; line-height: 1.5;\"><span style=\"color: #000000;\">WAF ile alakal\u0131 bilmeniz gereken 5 kritik nokta;<\/span><\/p>\n<ol style=\"margin: 0; padding-left: 20px; color: #1e293b; line-height: 1.7; font-size: 16px;\">\n<li><strong>WAF (Web Application Firewall)<\/strong>, web uygulamalar\u0131na gelen HTTP ve HTTPS trafi\u011fini analiz ederek zararl\u0131 istekleri filtreleyen bir g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fcd\u00fcr.<\/li>\n<li><strong>SQL Injection ve XSS sald\u0131r\u0131lar\u0131<\/strong>, WAF sistemlerinin belirli g\u00fcvenlik kurallar\u0131yla tespit edip engellemeye yard\u0131mc\u0131 olabildi\u011fi yayg\u0131n tehditler aras\u0131ndad\u0131r.<\/li>\n<li>WAF t\u00fcrleri <strong>a\u011f tabanl\u0131, host tabanl\u0131 ve bulut tabanl\u0131<\/strong> olmak \u00fczere \u00fc\u00e7 temel grupta incelenir.<\/li>\n<li>WAF ile firewall aras\u0131ndaki fark WAF&#8217;\u0131n web uygulamas\u0131 trafi\u011fine, geleneksel g\u00fcvenlik duvarlar\u0131n\u0131n ise a\u011f\u0131rl\u0131kl\u0131 olarak a\u011f eri\u015fimine odaklanmas\u0131d\u0131r.<\/li>\n<li>WAF tek ba\u015f\u0131na yeterli de\u011fildir. Etkili bir koruma i\u00e7in g\u00fcvenli <strong>yaz\u0131l\u0131m geli\u015ftirme, d\u00fczenli g\u00fcncellemeler ve sunucu g\u00fcvenli\u011fi<\/strong> \u00f6nlemleriyle birlikte kullan\u0131lmal\u0131d\u0131r.<\/li>\n<\/ol>\n<\/div>\n<p><span style=\"font-weight: 400;\">WAF (Web Application Firewall), web uygulamalar\u0131na gelen HTTP ve HTTPS isteklerini analiz ederek zararl\u0131 veya \u015f\u00fcpheli trafi\u011fi filtreleyen bir g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fcd\u00fcr. T\u00fcrk\u00e7ede web uygulamas\u0131 g\u00fcvenlik duvar\u0131 olarak adland\u0131r\u0131lan WAF, \u00f6zellikle SQL Injection, Cross-Site Scripting (XSS) ve otomatik sald\u0131r\u0131 giri\u015fimlerine kar\u015f\u0131 ek bir koruma katman\u0131 olu\u015fturur.<\/span><\/p>\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title ez-toc-toggle\" style=\"cursor:pointer\">\u0130\u00e7indekiler<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"\u0130\u00e7indekiler Tablosunu A\u00e7\/Kapat\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#WAF_Web_Application_Firewall_Ne_Ise_Yarar\" >WAF (Web Application Firewall) Ne \u0130\u015fe Yarar?<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#Zararli_istekleri_filtrelemek\" >Zararl\u0131 istekleri filtrelemek<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#Yaygin_saldirilara_karsi_koruma_saglamak\" >Yayg\u0131n sald\u0131r\u0131lara kar\u015f\u0131 koruma sa\u011flamak<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#Otomatik_trafigi_kontrol_etmek\" >Otomatik trafi\u011fi kontrol etmek<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#Guvenlik_olaylarini_izlemek\" >G\u00fcvenlik olaylar\u0131n\u0131 izlemek<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#Uygulama_guvenligini_desteklemek\" >Uygulama g\u00fcvenli\u011fini desteklemek<\/a><\/li><\/ul><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#WAF_Nasil_Calisir\" >WAF Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#HTTP_ve_HTTPS_Trafiginin_Analiz_Edilmesi\" >HTTP ve HTTPS Trafi\u011finin Analiz Edilmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#WAF_Kurallari_ve_Istek_Filtreleme\" >WAF Kurallar\u0131 ve \u0130stek Filtreleme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#Izin_Verme_Engelleme_ve_Dogrulama_Islemleri\" >\u0130zin Verme, Engelleme ve Do\u011frulama \u0130\u015flemleri<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#WAF_Hangi_Siber_Saldirilara_Karsi_Koruma_Saglar\" >WAF Hangi Siber Sald\u0131r\u0131lara Kar\u015f\u0131 Koruma Sa\u011flar?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#SQL_Injection_SQL_Enjeksiyonu\" >SQL Injection (SQL Enjeksiyonu)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#Cross-Site_Scripting_XSS\" >Cross-Site Scripting (XSS)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#Kotu_Amacli_Botlar_ve_Otomatik_Istekler\" >K\u00f6t\u00fc Ama\u00e7l\u0131 Botlar ve Otomatik \u0130stekler<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#WAF_DDoS_Saldirilarini_Engeller_Mi\" >WAF DDoS Sald\u0131r\u0131lar\u0131n\u0131 Engeller Mi?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#WAF_Turleri_Nelerdir\" >WAF T\u00fcrleri Nelerdir?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#Ag_Tabanli_WAF\" >A\u011f Tabanl\u0131 WAF<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#Host_Tabanli_WAF\" >Host Tabanl\u0131 WAF<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#Bulut_Tabanli_WAF\" >Bulut Tabanl\u0131 WAF<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#WAF_ile_Firewall_Arasindaki_Fark_Nedir\" >WAF ile Firewall Aras\u0131ndaki Fark Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#WAF_Nasil_Kurulur_ve_Yapilandirilir\" >WAF Nas\u0131l Kurulur ve Yap\u0131land\u0131r\u0131l\u0131r?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#WAF_Kurulumu_Oncesinde_Dikkat_Edilmesi_Gerekenler\" >WAF Kurulumu \u00d6ncesinde Dikkat Edilmesi Gerekenler<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#WAF_Kurallari_Nasil_Yonetilir\" >WAF Kurallar\u0131 Nas\u0131l Y\u00f6netilir?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#WAF_Kullanmanin_Avantajlari_ve_Sinirlamalari_Nelerdir\" >WAF Kullanman\u0131n Avantajlar\u0131 ve S\u0131n\u0131rlamalar\u0131 Nelerdir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#Sik_Sorulan_Sorular\" >S\u0131k Sorulan Sorular<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#WAF_kullanmak_gerekli_mi\" >WAF kullanmak gerekli mi?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#WAF_ile_antivirus_ayni_sey_mi\" >WAF ile antivir\u00fcs ayn\u0131 \u015fey mi?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#WAF_web_sitesini_yavaslatir_mi\" >WAF web sitesini yava\u015flat\u0131r m\u0131?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#WAF_ile_DDoS_korumasi_ayni_sey_mi\" >WAF ile DDoS korumas\u0131 ayn\u0131 \u015fey mi?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-30\" href=\"https:\/\/turkishost.com\/blog\/waf-nedir\/#WordPress_sitelerinde_WAF_kullanilabilir_mi\" >WordPress sitelerinde WAF kullan\u0131labilir mi?<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"WAF_Web_Application_Firewall_Ne_Ise_Yarar\"><\/span><span style=\"font-weight: 400;\">WAF (Web Application Firewall) Ne \u0130\u015fe Yarar?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><span style=\"font-weight: 400;\">WAF&#8217;\u0131n temel g\u00f6revi, web uygulamas\u0131 ile internet trafi\u011fi aras\u0131nda bir g\u00fcvenlik katman\u0131 olu\u015fturmakt\u0131r. Kullan\u0131c\u0131lardan gelen istekler, uygulamaya ula\u015fmadan \u00f6nce WAF taraf\u0131ndan incelenebilir. G\u00fcvenlik kurallar\u0131na ayk\u0131r\u0131 oldu\u011fu belirlenen istekler engellenebilir, s\u0131n\u0131rland\u0131r\u0131labilir veya ek do\u011frulamaya y\u00f6nlendirilebilir.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00d6zellikle \u00f6zel yaz\u0131l\u0131m uygulamalar\u0131 ve y\u00fcksek trafik alan web projelerinde WAF, sunucu g\u00fcvenli\u011fi stratejisinin \u00f6nemli bir par\u00e7as\u0131d\u0131r.<\/span> <span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"https:\/\/turkishost.com\/vds-server\"><b>VDS server<\/b><\/a><\/span> <span style=\"font-weight: 400;\">altyap\u0131lar\u0131nda \u00e7al\u0131\u015fan web uygulamalar\u0131 i\u00e7in de uygun WAF \u00e7\u00f6z\u00fcmleri kullan\u0131larak uygulama katman\u0131ndaki sald\u0131r\u0131 giri\u015fimlerine kar\u015f\u0131 koruma sa\u011flanabilir. WAF kullan\u0131m\u0131n\u0131n ba\u015fl\u0131ca ama\u00e7lar\u0131 \u015funlard\u0131r;<\/span><\/p>\n<div style=\"margin: 25px auto; font-family: 'Segoe UI', Roboto, Helvetica, Arial, sans-serif; max-width: 900px; color: #1e293b;\">\n<p><!-- Madde 1 --><\/p>\n<div style=\"background-color: #ffffff; border: 2px solid #bfdbfe; border-radius: 12px; padding: 22px; margin-bottom: 20px; box-shadow: 0 4px 6px -1px rgba(37, 99, 235, 0.06); display: flex; align-items: flex-start; box-sizing: border-box;\">\n<div style=\"background-color: #1d4ed8; color: #ffffff; width: 30px; height: 30px; border-radius: 8px; display: flex; align-items: center; justify-content: center; font-size: 15px; font-weight: bold; margin-right: 15px; flex-shrink: 0; box-shadow: 0 2px 4px rgba(29,78,216,0.2);\">\u2713<\/div>\n<div>\n<h4 style=\"margin: 0 0 6px 0; color: #1e3a8a; font-size: 18px; font-weight: bold;\"><span class=\"ez-toc-section\" id=\"Zararli_istekleri_filtrelemek\"><\/span>Zararl\u0131 istekleri filtrelemek<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p style=\"margin: 0; color: #334155; font-size: 16px; line-height: 1.5;\">\u015e\u00fcpheli HTTP isteklerinin web uygulaman\u0131za ula\u015fmas\u0131n\u0131 \u00f6nceden engeller ve sunucu kaynaklar\u0131n\u0131 korur.<\/p>\n<\/div>\n<\/div>\n<p><!-- Madde 2 --><\/p>\n<div style=\"background-color: #ffffff; border: 2px solid #bfdbfe; border-radius: 12px; padding: 22px; margin-bottom: 20px; box-shadow: 0 4px 6px -1px rgba(37, 99, 235, 0.06); display: flex; align-items: flex-start; box-sizing: border-box;\">\n<div style=\"background-color: #1d4ed8; color: #ffffff; width: 30px; height: 30px; border-radius: 8px; display: flex; align-items: center; justify-content: center; font-size: 15px; font-weight: bold; margin-right: 15px; flex-shrink: 0; box-shadow: 0 2px 4px rgba(29,78,216,0.2);\">\u2713<\/div>\n<div>\n<h4 style=\"margin: 0 0 6px 0; color: #1e3a8a; font-size: 18px; font-weight: bold;\"><span class=\"ez-toc-section\" id=\"Yaygin_saldirilara_karsi_koruma_saglamak\"><\/span>Yayg\u0131n sald\u0131r\u0131lara kar\u015f\u0131 koruma sa\u011flamak<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p style=\"margin: 0; color: #334155; font-size: 16px; line-height: 1.5;\">SQL Injection (SQL\u0130) ve Siteler Aras\u0131 Komut \u00c7al\u0131\u015ft\u0131rma (XSS) gibi kritik web sald\u0131r\u0131 giri\u015fimlerini an\u0131nda tespit eder.<\/p>\n<\/div>\n<\/div>\n<p><!-- Madde 3 --><\/p>\n<div style=\"background-color: #ffffff; border: 2px solid #bfdbfe; border-radius: 12px; padding: 22px; margin-bottom: 20px; box-shadow: 0 4px 6px -1px rgba(37, 99, 235, 0.06); display: flex; align-items: flex-start; box-sizing: border-box;\">\n<div style=\"background-color: #1d4ed8; color: #ffffff; width: 30px; height: 30px; border-radius: 8px; display: flex; align-items: center; justify-content: center; font-size: 15px; font-weight: bold; margin-right: 15px; flex-shrink: 0; box-shadow: 0 2px 4px rgba(29,78,216,0.2);\">\u2713<\/div>\n<div>\n<h4 style=\"margin: 0 0 6px 0; color: #1e3a8a; font-size: 18px; font-weight: bold;\"><span class=\"ez-toc-section\" id=\"Otomatik_trafigi_kontrol_etmek\"><\/span>Otomatik trafi\u011fi kontrol etmek<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p style=\"margin: 0; color: #334155; font-size: 16px; line-height: 1.5;\">Zararl\u0131 bot davran\u0131\u015flar\u0131n\u0131, tarama faaliyetlerini ve siteye y\u00f6nelen a\u015f\u0131r\u0131 istekleri g\u00fcvenli bir \u015fekilde s\u0131n\u0131rland\u0131r\u0131r.<\/p>\n<\/div>\n<\/div>\n<p><!-- Madde 4 --><\/p>\n<div style=\"background-color: #ffffff; border: 2px solid #bfdbfe; border-radius: 12px; padding: 22px; margin-bottom: 20px; box-shadow: 0 4px 6px -1px rgba(37, 99, 235, 0.06); display: flex; align-items: flex-start; box-sizing: border-box;\">\n<div style=\"background-color: #1d4ed8; color: #ffffff; width: 30px; height: 30px; border-radius: 8px; display: flex; align-items: center; justify-content: center; font-size: 15px; font-weight: bold; margin-right: 15px; flex-shrink: 0; box-shadow: 0 2px 4px rgba(29,78,216,0.2);\">\u2713<\/div>\n<div>\n<h4 style=\"margin: 0 0 6px 0; color: #1e3a8a; font-size: 18px; font-weight: bold;\"><span class=\"ez-toc-section\" id=\"Guvenlik_olaylarini_izlemek\"><\/span>G\u00fcvenlik olaylar\u0131n\u0131 izlemek<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p style=\"margin: 0; color: #334155; font-size: 16px; line-height: 1.5;\">Engellenen \u015f\u00fcpheli istekleri ve anl\u0131k trafik \u00f6r\u00fcnt\u00fclerini ayr\u0131nt\u0131l\u0131 olarak kay\u0131t alt\u0131na alarak analiz imk\u00e2n\u0131 tan\u0131r.<\/p>\n<\/div>\n<\/div>\n<p><!-- Madde 5 --><\/p>\n<div style=\"background-color: #ffffff; border: 2px solid #bfdbfe; border-radius: 12px; padding: 22px; box-shadow: 0 4px 6px -1px rgba(37, 99, 235, 0.06); display: flex; align-items: flex-start; box-sizing: border-box;\">\n<div style=\"background-color: #1d4ed8; color: #ffffff; width: 30px; height: 30px; border-radius: 8px; display: flex; align-items: center; justify-content: center; font-size: 15px; font-weight: bold; margin-right: 15px; flex-shrink: 0; box-shadow: 0 2px 4px rgba(29,78,216,0.2);\">\u2713<\/div>\n<div>\n<h4 style=\"margin: 0 0 6px 0; color: #1e3a8a; font-size: 18px; font-weight: bold;\"><span class=\"ez-toc-section\" id=\"Uygulama_guvenligini_desteklemek\"><\/span>Uygulama g\u00fcvenli\u011fini desteklemek<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p style=\"margin: 0; color: #334155; font-size: 16px; line-height: 1.5;\">Mevcut yaz\u0131l\u0131m ve sunucu g\u00fcvenlik \u00f6nlemlerine \u00e7ok katmanl\u0131 ekstra bir savunma hatt\u0131 olu\u015fturur.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<p><span style=\"font-weight: 400;\">WAF, uygulama g\u00fcvenli\u011fini g\u00fc\u00e7lendirse de yaz\u0131l\u0131m a\u00e7\u0131klar\u0131n\u0131n giderilmesi, eri\u015fim yetkilerinin y\u00f6netilmesi ve sunucu g\u00fcncellemelerinin yap\u0131lmas\u0131 gibi temel g\u00fcvenlik i\u015flemlerinin yerine ge\u00e7mez.<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"WAF_Nasil_Calisir\"><\/span><span style=\"font-weight: 400;\">WAF Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><span style=\"font-weight: 400;\">WAF, web uygulamas\u0131na y\u00f6nlendirilen HTTP ve HTTPS trafi\u011fini belirli g\u00fcvenlik politikalar\u0131na g\u00f6re analiz eder. Kullan\u0131lan \u00e7\u00f6z\u00fcm\u00fcn mimarisine ba\u011fl\u0131 olarak trafik, ters proxy \u00fczerinden veya do\u011frudan uygulaman\u0131n \u00e7al\u0131\u015ft\u0131\u011f\u0131 ortamda incelenebilir.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Bir kullan\u0131c\u0131 web sitesine eri\u015fmek istedi\u011finde g\u00f6nderdi\u011fi istek, WAF taraf\u0131ndan de\u011ferlendirilir. \u0130stek g\u00fcvenlik kurallar\u0131na uygunsa uygulamaya iletilir. \u015e\u00fcpheli veya zararl\u0131 oldu\u011fu belirlenen isteklerde ise engelleme ya da do\u011frulama i\u015flemleri uygulanabilir.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">WAF, gelen istekleri g\u00fcvenlik kurallar\u0131na g\u00f6re de\u011ferlendirerek izin verme veya engelleme karar\u0131 alabilir.<\/span><\/p>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\" wp-image-658 aligncenter\" src=\"https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-nasil-calisir.webp\" alt=\"WAF Nas\u0131l \u00c7al\u0131\u015f\u0131r?\" width=\"687\" height=\"303\" srcset=\"https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-nasil-calisir.webp 1600w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-nasil-calisir-300x132.webp 300w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-nasil-calisir-1024x451.webp 1024w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-nasil-calisir-767x338.webp 767w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-nasil-calisir-1536x677.webp 1536w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-nasil-calisir-2048x902.webp 2048w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-nasil-calisir-340x150.webp 340w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-nasil-calisir-100x44.webp 100w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-nasil-calisir-794x350.webp 794w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-nasil-calisir-788x347.webp 788w\" sizes=\"(max-width: 687px) 100vw, 687px\" \/><\/p>\n<h3><span class=\"ez-toc-section\" id=\"HTTP_ve_HTTPS_Trafiginin_Analiz_Edilmesi\"><\/span><span style=\"font-weight: 400;\">HTTP ve HTTPS Trafi\u011finin Analiz Edilmesi<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><span style=\"font-weight: 400;\">WAF sistemleri URL adreslerini, HTTP ba\u015fl\u0131klar\u0131n\u0131, sorgu parametrelerini, \u00e7erezleri ve istek g\u00f6vdelerini inceleyebilir. HTTPS trafi\u011finin analiz edilebilmesi i\u00e7in kullan\u0131lan mimariye g\u00f6re \u015fifreli ba\u011flant\u0131n\u0131n uygun noktada sonland\u0131r\u0131lmas\u0131 gerekir.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">HTTP protokol\u00fcn\u00fcn i\u015fleyi\u015fini daha ayr\u0131nt\u0131l\u0131 \u00f6\u011frenmek i\u00e7in<\/span><span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"https:\/\/turkishost.com\/blog\/http-ne-demek\/\"><strong> HTTP Nedir?<\/strong><\/a><\/span><span style=\"font-weight: 400;\"> i\u00e7eri\u011fini inceleyebilirsiniz.<\/span><\/p>\n<h3><span class=\"ez-toc-section\" id=\"WAF_Kurallari_ve_Istek_Filtreleme\"><\/span><span style=\"font-weight: 400;\">WAF Kurallar\u0131 ve \u0130stek Filtreleme<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><span style=\"font-weight: 400;\">WAF sistemleri genellikle imza tabanl\u0131 kurallar, davran\u0131\u015f analizleri ve \u00f6zel g\u00fcvenlik politikalar\u0131 kullan\u0131r. \u00d6rne\u011fin bir form alan\u0131nda SQL sorgular\u0131n\u0131 manip\u00fcle etmeye y\u00f6nelik karakter dizileri tespit edildi\u011finde istek engellenebilir.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Ancak her \u015f\u00fcpheli karakter dizisi ger\u00e7ek bir sald\u0131r\u0131 anlam\u0131na gelmez. Bu nedenle g\u00fcvenlik kurallar\u0131n\u0131n uygulaman\u0131n ihtiya\u00e7lar\u0131na g\u00f6re d\u00fczenlenmesi \u00f6nemlidir.<\/span><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Izin_Verme_Engelleme_ve_Dogrulama_Islemleri\"><\/span><span style=\"font-weight: 400;\">\u0130zin Verme, Engelleme ve Do\u011frulama \u0130\u015flemleri<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><span style=\"font-weight: 400;\">WAF taraf\u0131ndan incelenen isteklere farkl\u0131 i\u015flemler uygulanabilir:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Allow:<\/b><span style=\"font-weight: 400;\"> \u0130stek uygulamaya iletilir.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Block: <\/b><span style=\"font-weight: 400;\">\u0130stek engellenir.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Challenge: <\/b><span style=\"font-weight: 400;\">Kullan\u0131c\u0131dan ek do\u011frulama istenir.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Log:<\/b><span style=\"font-weight: 400;\"> \u0130stek kay\u0131t alt\u0131na al\u0131narak analiz edilir.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Bu i\u015flemler kullan\u0131lan WAF \u00fcr\u00fcn\u00fcn\u00fcn \u00f6zelliklerine ve yap\u0131land\u0131rmas\u0131na g\u00f6re de\u011fi\u015febilir.<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"WAF_Hangi_Siber_Saldirilara_Karsi_Koruma_Saglar\"><\/span><span style=\"font-weight: 400;\">WAF Hangi Siber Sald\u0131r\u0131lara Kar\u015f\u0131 Koruma Sa\u011flar?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><span style=\"font-weight: 400;\">WAF \u00e7\u00f6z\u00fcmleri, \u00f6zellikle web uygulamalar\u0131n\u0131 hedefleyen yayg\u0131n sald\u0131r\u0131 t\u00fcrlerinin tespit edilmesinde kullan\u0131l\u0131r. Bununla birlikte koruma d\u00fczeyi, kullan\u0131lan kurallara, uygulama mimarisine ve sald\u0131r\u0131n\u0131n niteli\u011fine ba\u011fl\u0131d\u0131r.<\/span><\/p>\n<p><img decoding=\"async\" class=\" wp-image-660 aligncenter\" src=\"https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-siber-saldiri-korumasi.webp\" alt=\"WAF Siber Sald\u0131r\u0131 Korumas\u0131\" width=\"643\" height=\"321\" srcset=\"https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-siber-saldiri-korumasi.webp 1600w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-siber-saldiri-korumasi-300x150.webp 300w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-siber-saldiri-korumasi-1024x511.webp 1024w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-siber-saldiri-korumasi-768x383.webp 768w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-siber-saldiri-korumasi-1536x766.webp 1536w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-siber-saldiri-korumasi-2048x1021.webp 2048w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-siber-saldiri-korumasi-301x150.webp 301w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-siber-saldiri-korumasi-100x50.webp 100w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-siber-saldiri-korumasi-702x350.webp 702w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-siber-saldiri-korumasi-788x393.webp 788w\" sizes=\"(max-width: 643px) 100vw, 643px\" \/><\/p>\n<h3><span class=\"ez-toc-section\" id=\"SQL_Injection_SQL_Enjeksiyonu\"><\/span><span style=\"font-weight: 400;\">SQL Injection (SQL Enjeksiyonu)<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><span style=\"font-weight: 400;\">SQL Injection, sald\u0131rganlar\u0131n uygulaman\u0131n veritaban\u0131 sorgular\u0131n\u0131 manip\u00fcle etmeye \u00e7al\u0131\u015ft\u0131\u011f\u0131 bir sald\u0131r\u0131 t\u00fcr\u00fcd\u00fcr. \u00d6zellikle kullan\u0131c\u0131 giri\u015fleri do\u011fru do\u011frulanmad\u0131\u011f\u0131nda veya sorgular g\u00fcvenli \u015fekilde olu\u015fturulmad\u0131\u011f\u0131nda risk ortaya \u00e7\u0131kabilir.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">WAF, bilinen SQL Injection \u00f6r\u00fcnt\u00fclerini tespit ederek \u015f\u00fcpheli istekleri engelleyebilir. Ancak kal\u0131c\u0131 \u00e7\u00f6z\u00fcm i\u00e7in parametrik sorgular gibi g\u00fcvenli yaz\u0131l\u0131m geli\u015ftirme y\u00f6ntemleri kullan\u0131lmal\u0131d\u0131r.<\/span><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Cross-Site_Scripting_XSS\"><\/span><span style=\"font-weight: 400;\">Cross-Site Scripting (XSS)<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><span style=\"font-weight: 400;\">XSS sald\u0131r\u0131lar\u0131, zararl\u0131 istemci taraf\u0131 kodlar\u0131n web uygulamas\u0131 \u00fczerinden kullan\u0131c\u0131lar\u0131n taray\u0131c\u0131lar\u0131nda \u00e7al\u0131\u015ft\u0131r\u0131lmas\u0131n\u0131 hedefler.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">WAF, baz\u0131 XSS sald\u0131r\u0131 \u00f6r\u00fcnt\u00fclerini filtreleyebilir. Bununla birlikte \u00e7\u0131kt\u0131 kodlama, g\u00fcvenli \u015fablonlama ve uygun Content Security Policy yap\u0131land\u0131rmalar\u0131 gibi uygulama d\u00fczeyindeki \u00f6nlemler de gereklidir.<\/span><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kotu_Amacli_Botlar_ve_Otomatik_Istekler\"><\/span><span style=\"font-weight: 400;\">K\u00f6t\u00fc Ama\u00e7l\u0131 Botlar ve Otomatik \u0130stekler<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><span style=\"font-weight: 400;\">Otomatik botlar; giri\u015f sayfalar\u0131na yo\u011fun istek g\u00f6nderme, i\u00e7erik toplama veya g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 tarama gibi i\u015flemler ger\u00e7ekle\u015ftirebilir.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u00d6zellikle<\/span> <span style=\"font-weight: 400;\"><span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"https:\/\/turkishost.com\/wordpress-hosting\"><strong>WordPress hosting<\/strong><\/a><\/span><\/span><span style=\"font-weight: 400;\"> hizmetlerinde bar\u0131nd\u0131r\u0131lan sitelerde, y\u00f6netici giri\u015f sayfalar\u0131na ve belirli uygulama u\u00e7 noktalar\u0131na y\u00f6nelen otomatik isteklerin kontrol edilmesi \u00f6nemlidir.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">WAF sistemleri, istek s\u0131kl\u0131\u011f\u0131 ve davran\u0131\u015f \u00f6r\u00fcnt\u00fclerine g\u00f6re baz\u0131 bot faaliyetlerini s\u0131n\u0131rland\u0131rabilir.<\/span><\/p>\n<h3><span class=\"ez-toc-section\" id=\"WAF_DDoS_Saldirilarini_Engeller_Mi\"><\/span><span style=\"font-weight: 400;\">WAF DDoS Sald\u0131r\u0131lar\u0131n\u0131 Engeller Mi?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><span style=\"font-weight: 400;\">WAF, HTTP ve HTTPS \u00fczerinden ger\u00e7ekle\u015ftirilen baz\u0131 uygulama katman\u0131 (Layer 7) DDoS sald\u0131r\u0131lar\u0131n\u0131n etkisini azaltmaya yard\u0131mc\u0131 olabilir.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Ancak y\u00fcksek hacimli a\u011f ve ta\u015f\u0131ma katman\u0131 sald\u0131r\u0131lar\u0131 i\u00e7in WAF tek ba\u015f\u0131na yeterli de\u011fildir. Bu t\u00fcr tehditlere kar\u015f\u0131 a\u011f seviyesinde DDoS korumas\u0131, trafik filtreleme ve uygun altyap\u0131 kapasitesi gerekir.<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"WAF_Turleri_Nelerdir\"><\/span><span style=\"font-weight: 400;\">WAF T\u00fcrleri Nelerdir?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><span style=\"font-weight: 400;\">WAF \u00e7\u00f6z\u00fcmleri, kurulum ve y\u00f6netim modellerine g\u00f6re farkl\u0131 t\u00fcrlere ayr\u0131l\u0131r. Hangi modelin uygun oldu\u011fu, web uygulamas\u0131n\u0131n bar\u0131nd\u0131r\u0131ld\u0131\u011f\u0131 ortama ve i\u015fletmenin teknik ihtiya\u00e7lar\u0131na ba\u011fl\u0131d\u0131r.<\/span><\/p>\n<p><img decoding=\"async\" class=\" wp-image-661 aligncenter\" src=\"https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-turleri.webp\" alt=\"WAF T\u00fcrleri\" width=\"688\" height=\"268\" srcset=\"https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-turleri.webp 1600w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-turleri-300x117.webp 300w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-turleri-1024x399.webp 1024w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-turleri-768x299.webp 768w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-turleri-1536x598.webp 1536w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-turleri-2048x797.webp 2048w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-turleri-385x150.webp 385w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-turleri-100x39.webp 100w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-turleri-899x350.webp 899w, https:\/\/turkishost.com\/blog\/wp-content\/uploads\/2026\/11\/waf-turleri-788x306.webp 788w\" sizes=\"(max-width: 688px) 100vw, 688px\" \/><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ag_Tabanli_WAF\"><\/span><span style=\"font-weight: 400;\">A\u011f Tabanl\u0131 WAF<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><span style=\"font-weight: 400;\">A\u011f tabanl\u0131 WAF, genellikle veri merkezi veya kurum a\u011f\u0131 i\u00e7erisinde konumland\u0131r\u0131lan fiziksel ya da sanal g\u00fcvenlik cihazlar\u0131 \u00fczerinden \u00e7al\u0131\u015f\u0131r.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Bu yakla\u015f\u0131m, trafik kontrol\u00fcn\u00fc kendi altyap\u0131s\u0131nda ger\u00e7ekle\u015ftirmek isteyen kurumlar taraf\u0131ndan tercih edilebilir. Ancak donan\u0131m, lisans ve bak\u0131m maliyetleri dikkate al\u0131nmal\u0131d\u0131r.<\/span><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Host_Tabanli_WAF\"><\/span><span style=\"font-weight: 400;\">Host Tabanl\u0131 WAF<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><span style=\"font-weight: 400;\">Host tabanl\u0131 WAF, web sunucusuna veya uygulaman\u0131n \u00e7al\u0131\u015ft\u0131\u011f\u0131 ortama entegre edilir. ModSecurity gibi \u00e7\u00f6z\u00fcmler bu modele \u00f6rnek g\u00f6sterilebilir.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Bu yap\u0131, kurallar \u00fczerinde ayr\u0131nt\u0131l\u0131 kontrol sa\u011flayabilir. Bununla birlikte sunucu kaynaklar\u0131n\u0131n kullan\u0131m\u0131 ve g\u00fcvenlik kurallar\u0131n\u0131n y\u00f6netimi teknik bilgi gerektirebilir.<\/span><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Bulut_Tabanli_WAF\"><\/span><span style=\"font-weight: 400;\">Bulut Tabanl\u0131 WAF<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><span style=\"font-weight: 400;\">Bulut tabanl\u0131 WAF, web trafi\u011fini bulut sa\u011flay\u0131c\u0131s\u0131n\u0131n altyap\u0131s\u0131 \u00fczerinden filtreler. Genellikle DNS veya proxy yap\u0131land\u0131rmalar\u0131yla etkinle\u015ftirilir.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Bulut tabanl\u0131 \u00e7\u00f6z\u00fcmler, merkezi y\u00f6netim ve h\u0131zl\u0131 devreye alma a\u00e7\u0131s\u0131ndan avantaj sa\u011flayabilir. Ancak hizmet kapsam\u0131, fiyatland\u0131rma ve sa\u011flay\u0131c\u0131ya ba\u011f\u0131ml\u0131l\u0131k gibi unsurlar de\u011ferlendirilmelidir.<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"WAF_ile_Firewall_Arasindaki_Fark_Nedir\"><\/span><span style=\"font-weight: 400;\">WAF ile Firewall Aras\u0131ndaki Fark Nedir?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><span style=\"font-weight: 400;\">WAF ve geleneksel g\u00fcvenlik duvar\u0131 (firewall), farkl\u0131 g\u00fcvenlik ihtiya\u00e7lar\u0131n\u0131 kar\u015f\u0131lamak i\u00e7in tasarlanm\u0131\u015ft\u0131r. Her iki \u00e7\u00f6z\u00fcm de a\u011f trafi\u011fini kontrol edebilir ancak odakland\u0131klar\u0131 tehditler ve analiz y\u00f6ntemleri farkl\u0131d\u0131r.<\/span><\/p>\n<div style=\"margin: 25px 0; font-family: 'Segoe UI', Roboto, Helvetica, Arial, sans-serif; overflow-x: auto;\">\n<table style=\"width: 100%; border-collapse: collapse; background-color: #ffffff; border: 2px solid #bfdbfe; border-radius: 8px; overflow: hidden; box-shadow: 0 4px 6px -1px rgba(37, 99, 235, 0.08); font-size: 15px; color: #1e293b;\">\n<thead>\n<tr style=\"background-color: #eff6ff; border-bottom: 2px solid #1d4ed8;\">\n<th style=\"padding: 14px 18px; text-align: left; color: #1e3a8a; font-weight: bold; width: 22%;\">\u00d6zellik<\/th>\n<th style=\"padding: 14px 18px; text-align: left; color: #1e3a8a; font-weight: bold; width: 39%;\">WAF (Web Application Firewall)<\/th>\n<th style=\"padding: 14px 18px; text-align: left; color: #1e3a8a; font-weight: bold; width: 39%;\">Geleneksel Firewall<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr style=\"border-bottom: 1px solid #bfdbfe;\">\n<td style=\"padding: 12px 18px; font-weight: 600; color: #1e3a8a; background-color: #f8fafc;\">Temel amac\u0131<\/td>\n<td style=\"padding: 12px 18px; color: #334155;\">Web uygulamas\u0131 trafi\u011fini korumak.<\/td>\n<td style=\"padding: 12px 18px; color: #334155;\">A\u011f eri\u015fimini kontrol etmek.<\/td>\n<\/tr>\n<tr style=\"border-bottom: 1px solid #bfdbfe;\">\n<td style=\"padding: 12px 18px; font-weight: 600; color: #1e3a8a; background-color: #f8fafc;\">Odakland\u0131\u011f\u0131 katman<\/td>\n<td style=\"padding: 12px 18px; color: #334155;\">HTTP\/HTTPS uygulama trafi\u011fi.<\/td>\n<td style=\"padding: 12px 18px; color: #334155;\">Genellikle a\u011f ve ta\u015f\u0131ma katmanlar\u0131.<\/td>\n<\/tr>\n<tr style=\"border-bottom: 1px solid #bfdbfe;\">\n<td style=\"padding: 12px 18px; font-weight: 600; color: #1e3a8a; background-color: #f8fafc;\">\u0130nceledi\u011fi bilgiler<\/td>\n<td style=\"padding: 12px 18px; color: #334155;\">URL, ba\u015fl\u0131k, \u00e7erez, istek g\u00f6vdesi.<\/td>\n<td style=\"padding: 12px 18px; color: #334155;\">IP adresi, port, protokol ve ba\u011flant\u0131 durumu.<\/td>\n<\/tr>\n<tr style=\"border-bottom: 1px solid #bfdbfe;\">\n<td style=\"padding: 12px 18px; font-weight: 600; color: #1e3a8a; background-color: #f8fafc;\">Koruma \u00f6rnekleri<\/td>\n<td style=\"padding: 12px 18px; color: #334155;\">SQL Injection, XSS, zararl\u0131 HTTP istekleri.<\/td>\n<td style=\"padding: 12px 18px; color: #334155;\">Yetkisiz ba\u011flant\u0131lar, a\u011f eri\u015fim ihlalleri.<\/td>\n<\/tr>\n<tr>\n<td style=\"padding: 12px 18px; font-weight: 600; color: #1e3a8a; background-color: #f8fafc;\">Kullan\u0131m alan\u0131<\/td>\n<td style=\"padding: 12px 18px; color: #334155;\">Web siteleri ve web API&#8217;leri.<\/td>\n<td style=\"padding: 12px 18px; color: #334155;\">Sunucular, a\u011flar ve kurumsal sistemler.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p><span style=\"font-weight: 400;\">Modern g\u00fcvenlik duvarlar\u0131n\u0131n uygulama fark\u0131ndal\u0131\u011f\u0131 gibi geli\u015fmi\u015f \u00f6zellikleri bulunabilir. Bu nedenle iki teknoloji aras\u0131ndaki s\u0131n\u0131rlar kullan\u0131lan \u00fcr\u00fcne g\u00f6re de\u011fi\u015febilir.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">WAF, geleneksel firewall&#8217;un yerine ge\u00e7en bir \u00e7\u00f6z\u00fcm de\u011fildir. Web uygulamas\u0131 g\u00fcvenli\u011finin a\u011f g\u00fcvenli\u011fiyle birlikte ele al\u0131nmas\u0131 gerekir.<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"WAF_Nasil_Kurulur_ve_Yapilandirilir\"><\/span><span style=\"font-weight: 400;\">WAF Nas\u0131l Kurulur ve Yap\u0131land\u0131r\u0131l\u0131r?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><span style=\"font-weight: 400;\">WAF kurulumu, kullan\u0131lan \u00e7\u00f6z\u00fcm\u00fcn t\u00fcr\u00fcne g\u00f6re de\u011fi\u015fir. Bulut tabanl\u0131 hizmetlerde DNS ve proxy ayarlar\u0131 \u00fczerinden yap\u0131land\u0131rma yap\u0131labilirken host tabanl\u0131 \u00e7\u00f6z\u00fcmlerde web sunucusuna mod\u00fcl veya yaz\u0131l\u0131m kurulmas\u0131 gerekebilir.<\/span><\/p>\n<h3><span class=\"ez-toc-section\" id=\"WAF_Kurulumu_Oncesinde_Dikkat_Edilmesi_Gerekenler\"><\/span><span style=\"font-weight: 400;\">WAF Kurulumu \u00d6ncesinde Dikkat Edilmesi Gerekenler<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><span style=\"font-weight: 400;\">Kurulum \u00f6ncesinde uygulaman\u0131n trafik yap\u0131s\u0131, kullan\u0131lan yaz\u0131l\u0131mlar ve g\u00fcvenlik gereksinimleri de\u011ferlendirilmelidir. \u00d6zellikle a\u015fa\u011f\u0131daki konular \u00f6nemlidir;<\/span><\/p>\n<div class=\"wpsm_arrowlist wpsm_pretty_list\"><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Korunacak alan adlar\u0131n\u0131n ve uygulama u\u00e7 noktalar\u0131n\u0131n belirlenmesi.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Mevcut web sunucusu ve uygulama altyap\u0131s\u0131n\u0131n incelenmesi.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SSL\/TLS yap\u0131land\u0131rmas\u0131n\u0131n kontrol edilmesi.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Kullan\u0131lacak g\u00fcvenlik kural setlerinin se\u00e7ilmesi.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Yanl\u0131\u015f engellemelerin nas\u0131l izlenece\u011finin planlanmas\u0131.<\/span><\/li>\n<\/ol>\n<p><\/div>\n<h3><span class=\"ez-toc-section\" id=\"WAF_Kurallari_Nasil_Yonetilir\"><\/span><span style=\"font-weight: 400;\">WAF Kurallar\u0131 Nas\u0131l Y\u00f6netilir?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><span style=\"font-weight: 400;\">WAF kurallar\u0131 etkinle\u015ftirildikten sonra g\u00fcvenlik kay\u0131tlar\u0131 d\u00fczenli olarak incelenmelidir. \u00d6zellikle yeni kurallar\u0131n \u00f6nce izleme modunda test edilmesi, me\u015fru kullan\u0131c\u0131 i\u015flemlerinin yanl\u0131\u015fl\u0131kla engellenmesi riskini azaltabilir.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Mesela bir e-ticaret sitesinin \u00f6deme veya sepet i\u015flemlerinde kullan\u0131lan API isteklerinin yanl\u0131\u015fl\u0131kla engellenmesi, do\u011frudan kullan\u0131c\u0131 deneyimini etkileyebilir. Bu nedenle WAF yap\u0131land\u0131rmas\u0131, uygulaman\u0131n i\u015flevleriyle uyumlu \u015fekilde y\u00f6netilmelidir.<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"WAF_Kullanmanin_Avantajlari_ve_Sinirlamalari_Nelerdir\"><\/span><span style=\"font-weight: 400;\">WAF Kullanman\u0131n Avantajlar\u0131 ve S\u0131n\u0131rlamalar\u0131 Nelerdir?<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><span style=\"font-weight: 400;\">WAF, web uygulamalar\u0131na y\u00f6nelik bir\u00e7ok yayg\u0131n tehdide kar\u015f\u0131 ek koruma sa\u011flayabilir. Bununla birlikte her sald\u0131r\u0131y\u0131 engelleyen veya uygulamadaki g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 ortadan kald\u0131ran bir sistem de\u011fildir.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">WAF kullan\u0131m\u0131n\u0131n ba\u015fl\u0131ca avantajlar\u0131; zararl\u0131 isteklerin filtrelenmesi, g\u00fcvenlik olaylar\u0131n\u0131n izlenmesi ve belirli sald\u0131r\u0131 giri\u015fimlerinin uygulamaya ula\u015fmadan engellenebilmesidir.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Buna kar\u015f\u0131l\u0131k yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f kurallar me\u015fru kullan\u0131c\u0131lar\u0131n engellenmesine neden olabilir. Ayr\u0131ca geli\u015fmi\u015f sald\u0131r\u0131lar, i\u015f mant\u0131\u011f\u0131 a\u00e7\u0131klar\u0131 veya sunucu \u00fczerindeki g\u00fcvenlik sorunlar\u0131 WAF taraf\u0131ndan her zaman tespit edilemeyebilir.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Bu nedenle WAF, g\u00fcvenli yaz\u0131l\u0131m geli\u015ftirme, d\u00fczenli g\u00fcncelleme, eri\u015fim kontrol\u00fc ve sunucu g\u00fcvenli\u011fi ile birlikte kullan\u0131lmal\u0131d\u0131r.<\/span><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Sik_Sorulan_Sorular\"><\/span><span style=\"font-weight: 400;\">S\u0131k Sorulan Sorular<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<style>#sp-ea-662 .spcollapsing { height: 0; overflow: hidden; transition-property: height;transition-duration: 300ms;}#sp-ea-662.sp-easy-accordion>.sp-ea-single {margin-bottom: 10px; border: 1px solid #e2e2e2; }#sp-ea-662.sp-easy-accordion>.sp-ea-single>.ea-header a {color: #444;}#sp-ea-662.sp-easy-accordion>.sp-ea-single>.sp-collapse>.ea-body {background: #fff; color: #444;}#sp-ea-662.sp-easy-accordion>.sp-ea-single {background: #eee;}#sp-ea-662.sp-easy-accordion>.sp-ea-single>.ea-header a .ea-expand-icon { float: left; color: #444;font-size: 16px;}<\/style><div id=\"sp_easy_accordion-1794320745\"><div id=\"sp-ea-662\" class=\"sp-ea-one sp-easy-accordion\" data-ea-active=\"ea-click\" data-ea-mode=\"vertical\" data-preloader=\"\" data-scroll-active-item=\"\" data-offset-to-scroll=\"0\"><div class=\"ea-card ea-expand sp-ea-single\"><h3 class=\"ea-header\"><span class=\"ez-toc-section\" id=\"WAF_kullanmak_gerekli_mi\"><\/span><a class=\"collapsed\" id=\"ea-header-6620\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse6620\" aria-controls=\"collapse6620\" href=\"#\" aria-expanded=\"true\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-minus\"><\/i> WAF kullanmak gerekli mi?<\/a><span class=\"ez-toc-section-end\"><\/span><\/h3><div class=\"sp-collapse spcollapse collapsed show\" id=\"collapse6620\" data-parent=\"#sp-ea-662\" role=\"region\" aria-labelledby=\"ea-header-6620\"> <div class=\"ea-body\"><p><span style=\"font-weight: 400\">WAF kullan\u0131m\u0131 her web sitesi i\u00e7in zorunlu de\u011fildir. Ancak kullan\u0131c\u0131 verisi i\u015fleyen, yo\u011fun trafik alan veya internet \u00fczerinden eri\u015filebilen kritik uygulamalarda ek bir g\u00fcvenlik katman\u0131 sa\u011flayabilir. Gereklilik, uygulaman\u0131n risk d\u00fczeyine g\u00f6re de\u011ferlendirilmelidir.<\/span><\/p><\/div><\/div><\/div><div class=\"ea-card sp-ea-single\"><h3 class=\"ea-header\"><span class=\"ez-toc-section\" id=\"WAF_ile_antivirus_ayni_sey_mi\"><\/span><a class=\"collapsed\" id=\"ea-header-6621\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse6621\" aria-controls=\"collapse6621\" href=\"#\" aria-expanded=\"false\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-plus\"><\/i> WAF ile antivir\u00fcs ayn\u0131 \u015fey mi?<\/a><span class=\"ez-toc-section-end\"><\/span><\/h3><div class=\"sp-collapse spcollapse \" id=\"collapse6621\" data-parent=\"#sp-ea-662\" role=\"region\" aria-labelledby=\"ea-header-6621\"> <div class=\"ea-body\"><p><span style=\"font-weight: 400\">Hay\u0131r. WAF, web uygulamalar\u0131na gelen HTTP ve HTTPS isteklerini analiz ederek \u015f\u00fcpheli trafi\u011fi filtreler. Antivir\u00fcs yaz\u0131l\u0131mlar\u0131 ise genellikle cihazlarda veya sunucularda bulunan zararl\u0131 yaz\u0131l\u0131mlar\u0131n tespit edilmesine ve engellenmesine odaklan\u0131r.<\/span><\/p><\/div><\/div><\/div><div class=\"ea-card sp-ea-single\"><h3 class=\"ea-header\"><span class=\"ez-toc-section\" id=\"WAF_web_sitesini_yavaslatir_mi\"><\/span><a class=\"collapsed\" id=\"ea-header-6622\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse6622\" aria-controls=\"collapse6622\" href=\"#\" aria-expanded=\"false\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-plus\"><\/i> WAF web sitesini yava\u015flat\u0131r m\u0131?<\/a><span class=\"ez-toc-section-end\"><\/span><\/h3><div class=\"sp-collapse spcollapse \" id=\"collapse6622\" data-parent=\"#sp-ea-662\" role=\"region\" aria-labelledby=\"ea-header-6622\"> <div class=\"ea-body\"><p><span style=\"font-weight: 400\">WAF, gelen istekleri analiz etti\u011fi i\u00e7in belirli bir i\u015flem y\u00fck\u00fc olu\u015fturabilir. Ancak performans \u00fczerindeki etkisi kullan\u0131lan \u00e7\u00f6z\u00fcm\u00fcn mimarisine, kural say\u0131s\u0131na ve altyap\u0131 kapasitesine ba\u011fl\u0131d\u0131r. Do\u011fru yap\u0131land\u0131r\u0131lm\u0131\u015f bir WAF sisteminde bu etki s\u0131n\u0131rl\u0131 tutulabilir.<\/span><\/p><\/div><\/div><\/div><div class=\"ea-card sp-ea-single\"><h3 class=\"ea-header\"><span class=\"ez-toc-section\" id=\"WAF_ile_DDoS_korumasi_ayni_sey_mi\"><\/span><a class=\"collapsed\" id=\"ea-header-6623\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse6623\" aria-controls=\"collapse6623\" href=\"#\" aria-expanded=\"false\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-plus\"><\/i> WAF ile DDoS korumas\u0131 ayn\u0131 \u015fey mi?<\/a><span class=\"ez-toc-section-end\"><\/span><\/h3><div class=\"sp-collapse spcollapse \" id=\"collapse6623\" data-parent=\"#sp-ea-662\" role=\"region\" aria-labelledby=\"ea-header-6623\"> <div class=\"ea-body\"><p><span style=\"font-weight: 400\">Hay\u0131r. WAF, baz\u0131 uygulama katman\u0131 DDoS sald\u0131r\u0131lar\u0131n\u0131 azaltmaya yard\u0131mc\u0131 olabilir. Ancak a\u011f ve ta\u015f\u0131ma katman\u0131ndaki y\u00fcksek hacimli sald\u0131r\u0131lar i\u00e7in \u00f6zel DDoS koruma \u00e7\u00f6z\u00fcmleri gerekir.<\/span><\/p><\/div><\/div><\/div><div class=\"ea-card sp-ea-single\"><h3 class=\"ea-header\"><span class=\"ez-toc-section\" id=\"WordPress_sitelerinde_WAF_kullanilabilir_mi\"><\/span><a class=\"collapsed\" id=\"ea-header-6624\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse6624\" aria-controls=\"collapse6624\" href=\"#\" aria-expanded=\"false\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-plus\"><\/i> WordPress sitelerinde WAF kullan\u0131labilir mi?<\/a><span class=\"ez-toc-section-end\"><\/span><\/h3><div class=\"sp-collapse spcollapse \" id=\"collapse6624\" data-parent=\"#sp-ea-662\" role=\"region\" aria-labelledby=\"ea-header-6624\"> <div class=\"ea-body\"><p><span style=\"font-weight: 400\">WordPress sitelerinde bulut tabanl\u0131, sunucu tabanl\u0131 veya uygulama d\u00fczeyinde \u00e7al\u0131\u015fan WAF \u00e7\u00f6z\u00fcmleri kullan\u0131labilir. Bu sistemler giri\u015f sayfalar\u0131na y\u00f6nelik otomatik isteklerin s\u0131n\u0131rland\u0131r\u0131lmas\u0131 ve belirli web sald\u0131r\u0131lar\u0131n\u0131n filtrelenmesi gibi i\u015flemlerde yard\u0131mc\u0131 olabilir.<\/span><\/p><\/div><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>\ud83d\udccc \u00d6ne \u00c7\u0131kan Noktalar WAF ile alakal\u0131 bilmeniz gereken 5 kritik nokta; WAF (Web Application Firewall), web uygulamalar\u0131na gelen HTTP ve HTTPS trafi\u011fini analiz ederek zararl\u0131 istekleri filtreleyen bir g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fcd\u00fcr. SQL Injection ve XSS sald\u0131r\u0131lar\u0131, WAF sistemlerinin belirli g\u00fcvenlik kurallar\u0131yla tespit edip engellemeye yard\u0131mc\u0131 olabildi\u011fi yayg\u0131n tehditler aras\u0131ndad\u0131r. WAF t\u00fcrleri a\u011f tabanl\u0131, host tabanl\u0131 [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":664,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,4,10],"tags":[128,130,129,126,127],"offerexpiration":[],"class_list":["post-657","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sunucu","category-hosting","category-internet","tag-waf-guvenlik-duvari","tag-waf-korumasi","tag-waf-nasil-calisir","tag-waf-nedir","tag-web-application-firewall"],"_links":{"self":[{"href":"https:\/\/turkishost.com\/blog\/wp-json\/wp\/v2\/posts\/657","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/turkishost.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/turkishost.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/turkishost.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/turkishost.com\/blog\/wp-json\/wp\/v2\/comments?post=657"}],"version-history":[{"count":2,"href":"https:\/\/turkishost.com\/blog\/wp-json\/wp\/v2\/posts\/657\/revisions"}],"predecessor-version":[{"id":691,"href":"https:\/\/turkishost.com\/blog\/wp-json\/wp\/v2\/posts\/657\/revisions\/691"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/turkishost.com\/blog\/wp-json\/wp\/v2\/media\/664"}],"wp:attachment":[{"href":"https:\/\/turkishost.com\/blog\/wp-json\/wp\/v2\/media?parent=657"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/turkishost.com\/blog\/wp-json\/wp\/v2\/categories?post=657"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/turkishost.com\/blog\/wp-json\/wp\/v2\/tags?post=657"},{"taxonomy":"offerexpiration","embeddable":true,"href":"https:\/\/turkishost.com\/blog\/wp-json\/wp\/v2\/offerexpiration?post=657"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}