Overview

The GAJWAF Features & Configuration Guide provides a comprehensive reference to the features, security controls and configuration options available in GAJWAF, GajShield's Web Application and API Protection (WAAP) solution.

Designed for administrators and security professionals, this guide explains how to configure and manage GAJWAF's application security capabilities through its management console.

The documentation follows the same sequence as the GAJWAF console, allowing administrators to locate settings easily and understand their purpose, configuration parameters and operational behavior.

What's Covered in This Guide?

The guide provides detailed information on:

1. Application Configuration & Security Policies

Configure protected websites and applications, backend servers, security levels, blocking sensitivity and enforcement modes.

2. Zero Trust Access & Identity Security

Configure authentication using LDAP/Active Directory, RADIUS and OpenID Connect (OIDC), along with trusted devices, continuous session verification, access rules and shared identity-risk security domains.

3. Backend Connectivity & TLS Security

Manage HTTPS certificates, TLS settings, backend connectivity, load balancing, session persistence and health checks.

4. Advanced Threat Detection

Understand signature-based attack detection, application fingerprinting, machine-learning detection, traffic learning, account takeover protection, hidden-field tampering detection and website defacement monitoring.

5. IP Reputation & Geographic Security

Configure IP reputation checks, country-based access policies and controls for suspicious networks.

6. API Security

Protect APIs through OpenAPI schema enforcement, API authentication, identity-aware rate limiting, scope restrictions and XML/SOAP validation.

7. Bot Management & Client-Side Protection

Configure browser challenges, behavioral bot detection, device tracking, bot deception and client-side script protection.

8. Rate Limiting & Automated Bans

Control excessive requests, configure login rate limits and automatically restrict abusive clients.

9. Data Leak Prevention & Response Security

Configure response-based data protection, sensitive information masking, security headers, request limits and GraphQL protection.

10. Custom Rules, Exclusions & Virtual Patching

Fine-tune security policies, create custom detection rules and use vulnerability scanner findings to configure virtual patches.

11. Global Administration & System Settings

Manage listeners, administrative access, alerts, threat intelligence feeds, reporting, antivirus services, software updates, high-availability clustering and licensing.

A Console-Aligned Configuration Reference

A key advantage of this guide is its direct alignment with the GAJWAF management interface.

Each documented configuration option includes:

  • Console Label: The exact name displayed in the GAJWAF interface.
  • Configuration Key: The corresponding configuration parameter for technical review and automation.
  • Description and Notes: An explanation of the setting, including applicable values, dependencies and important considerations.

The guide also explains the differences between Block, Detect and Off modes, helping administrators understand when security controls actively enforce protection and when they operate in monitoring mode.

Who Should Use This Guide?

This document is intended for:

  • GAJWAF administrators and security engineers
  • IT and network security teams
  • Security operations personnel
  • GajShield customers and authorized partners
  • Technical support and implementation engineers

Download the Guide

Document: GAJWAF Features & Configuration Guide
Document Date: October 2026
Format: PDF
Pages: 30
Publisher: GajShield Infotech Pvt. Ltd.

Attachment: GAJWAF_Features_Guide.pdf

Download the attached PDF to explore GAJWAF's features and configuration options in detail.

Additional Resources

For installation and initial deployment instructions, refer to the GAJWAF Quick Setup Guide.

For help diagnosing configuration or operational issues, refer to the GAJWAF Troubleshooting Guide.

For further assistance, contact GajShield Technical Support or your authorized GajShield partner.

Website: https://www.gajshield.com

GAJWAF: Different Applications. Different Protection. Shared Risk Intelligence.