WAF Validates JWT Tokens (Configuration + 4 Attack Scenarios)

[Shay_Levin]

Learn how Check Point CloudGuard WAF enforces JWT authentication at the edge , blocking forged, expired, and unauthenticated API requests before they ever reach your backend.

In this video, we cover:

• How CloudGuard WAF performs existence, expiration, and signature verification
• Step-by-step configuration in the Check Point Infinity Portal
• Live demo against 4 attack scenarios: – No token (existence check)
• Expired token (5-minute clock-skew tolerance)
• Token signed with the wrong RSA key (signature verification)
• Valid token (happy path)
• How blocked requests appear in the Events log

🔗 Useful Links CloudGuard WAF Authentication Enforcement docs: https://waf-doc.inext.checkpoint.com/additional-security-engines/api-protection/authentication-enfor...

To view this video, you must Accept and consent to the use of cookies.

Accept