WAF Validates JWT Tokens (Configuration + 4 Attack Scenarios)

Shay_Levin — Wed, 29 Apr 2026 12:11:15 GMT

Learn how Check Point CloudGuard WAF enforces JWT authentication at the edge , blocking forged, expired, and unauthenticated API requests before they ever reach your backend.

In this video, we cover:

How CloudGuard WAF performs existence, expiration, and signature verification
Step-by-step configuration in the Check Point Infinity Portal
Live demo against 4 attack scenarios: – No token (existence check)
Expired token (5-minute clock-skew tolerance)
Token signed with the wrong RSA key (signature verification)
Valid token (happy path)
How blocked requests appear in the Events log

🔗 Useful Links CloudGuard WAF Authentication Enforcement docs: https://waf-doc.inext.checkpoint.com/additional-security-engines/api-protection/authentication-enforcement

topic WAF Validates JWT Tokens (Configuration + 4 Attack Scenarios) in WAF

WAF Validates JWT Tokens (Configuration + 4 Attack Scenarios)