{"id":9017,"date":"2026-07-30T15:47:42","date_gmt":"2026-07-30T12:47:42","guid":{"rendered":"https:\/\/www.domainhizmetleri.com\/blog\/?p=9017"},"modified":"2026-07-30T17:10:43","modified_gmt":"2026-07-30T14:10:43","slug":"web-guvenlik-duvari-nedir","status":"publish","type":"post","link":"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/","title":{"rendered":"Web Uygulamas\u0131 G\u00fcvenlik Duvar\u0131 (WAF) Nedir?"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Yaz\u0131 \u0130\u00e7eri\u011fi<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"\u0130\u00e7indekiler Tablosunu A\u00e7\/Kapat\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #0a0a0a;color:#0a0a0a\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #0a0a0a;color:#0a0a0a\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#WAF_Nedir\" >WAF Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#WAF_Nasil_Calisir\" >WAF Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#WAF_Hangi_Saldirilara_Karsi_Koruma_Saglar\" >WAF Hangi Sald\u0131r\u0131lara Kar\u015f\u0131 Koruma Sa\u011flar?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#SQL_Injection\" >SQL Injection<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#Cross-Site_Scripting\" >Cross-Site Scripting<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#Dosya_Dahil_Etme_Saldirilari\" >Dosya Dahil Etme Sald\u0131r\u0131lar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#Zararli_Bot_Trafigi\" >Zararl\u0131 Bot Trafi\u011fi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#Kotu_Amacli_Dosya_Yuklemeleri\" >K\u00f6t\u00fc Ama\u00e7l\u0131 Dosya Y\u00fcklemeleri<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#WAF_ile_Klasik_Guvenlik_Duvari_Arasindaki_Fark_Nedir\" >WAF ile Klasik G\u00fcvenlik Duvar\u0131 Aras\u0131ndaki Fark Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#WAF_Turleri_Nelerdir\" >WAF T\u00fcrleri Nelerdir?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#Bulut_Tabanli_WAF\" >Bulut Tabanl\u0131 WAF<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#Sunucu_Uzerinde_Calisan_WAF\" >Sunucu \u00dczerinde \u00c7al\u0131\u015fan WAF<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#Donanim_Tabanli_WAF\" >Donan\u0131m Tabanl\u0131 WAF<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#WAF_Kullanmanin_Avantajlari_Nelerdir\" >WAF Kullanman\u0131n Avantajlar\u0131 Nelerdir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#WAF_Tek_Basina_Yeterli_midir\" >WAF Tek Ba\u015f\u0131na Yeterli midir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#WAF_Yapilandirilirken_Nelere_Dikkat_Edilmelidir\" >WAF Yap\u0131land\u0131r\u0131l\u0131rken Nelere Dikkat Edilmelidir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.domainhizmetleri.com\/blog\/web-guvenlik-duvari-nedir\/#Sonuc\" >Sonu\u00e7<\/a><\/li><\/ul><\/nav><\/div>\n\n<p class=\"wp-block-paragraph\">Web siteleri ve \u00e7evrim i\u00e7i uygulamalar; zararl\u0131 botlar, otomatik sald\u0131r\u0131lar, k\u00f6t\u00fc ama\u00e7l\u0131 istekler ve yetkisiz eri\u015fim giri\u015fimleriyle kar\u015f\u0131 kar\u015f\u0131ya kalabilir. Sunucu g\u00fcvenli\u011fi i\u00e7in kullan\u0131lan klasik g\u00fcvenlik duvarlar\u0131 a\u011f trafi\u011fini kontrol ederken web uygulamalar\u0131n\u0131 hedef alan sald\u0131r\u0131lar i\u00e7in daha \u00f6zel bir koruma katman\u0131na ihtiya\u00e7 duyulur. Bu rehberde Web Uygulamas\u0131 G\u00fcvenlik Duvar\u0131, yani WAF nedir, nas\u0131l \u00e7al\u0131\u015f\u0131r, hangi sald\u0131r\u0131lara kar\u015f\u0131 koruma sa\u011flar ve neden kullan\u0131lmas\u0131 gerekir sorular\u0131n\u0131 ele al\u0131yoruz.<\/p>\n\n\n<figure class=\"wp-block-post-featured-image\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"502\" src=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Adsiz-tasarim-2026-07-27T105349.008.png\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"\" style=\"object-fit:cover;\" srcset=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Adsiz-tasarim-2026-07-27T105349.008.png 1200w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Adsiz-tasarim-2026-07-27T105349.008-300x126.png 300w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Adsiz-tasarim-2026-07-27T105349.008-1024x428.png 1024w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Adsiz-tasarim-2026-07-27T105349.008-990x414.png 990w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><\/figure>\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WAF_Nedir\"><\/span>WAF Nedir?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">WAF, \u201cWeb Application Firewall\u201d ifadesinin k\u0131saltmas\u0131d\u0131r. T\u00fcrk\u00e7ede Web Uygulamas\u0131 G\u00fcvenlik Duvar\u0131 olarak adland\u0131r\u0131l\u0131r. Web sitesi ile ziyaret\u00e7i aras\u0131ndaki HTTP ve HTTPS trafi\u011fini inceleyerek zararl\u0131 oldu\u011fu d\u00fc\u015f\u00fcn\u00fclen istekleri engeller.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bir kullan\u0131c\u0131 web sitesine eri\u015fmek istedi\u011finde g\u00f6nderdi\u011fi istek do\u011frudan uygulamaya ula\u015fmadan \u00f6nce WAF taraf\u0131ndan kontrol edilir. \u0130stek g\u00fcvenli g\u00f6r\u00fcn\u00fcyorsa sunucuya iletilir. \u015e\u00fcpheli kod, ola\u011fan d\u0131\u015f\u0131 parametre veya bilinen sald\u0131r\u0131 kal\u0131b\u0131 tespit edilirse ba\u011flant\u0131 reddedilebilir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WAF \u00f6zellikle WordPress, e-ticaret siteleri, y\u00f6netim panelleri, API servisleri ve kullan\u0131c\u0131 giri\u015fi bulunan web uygulamalar\u0131nda \u00f6nemli bir g\u00fcvenlik katman\u0131 olu\u015fturur.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"428\" src=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Nasil-6-1024x428.png\" alt=\"\" class=\"wp-image-9020\" srcset=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Nasil-6-1024x428.png 1024w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Nasil-6-300x125.png 300w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Nasil-6-1536x642.png 1536w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Nasil-6-990x414.png 990w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Nasil-6-1320x552.png 1320w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Nasil-6.png 1939w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WAF_Nasil_Calisir\"><\/span>WAF Nas\u0131l \u00c7al\u0131\u015f\u0131r?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">WAF, gelen web trafi\u011fini belirli g\u00fcvenlik kurallar\u0131na g\u00f6re analiz eder. Bu kurallar, bilinen sald\u0131r\u0131 y\u00f6ntemlerini, \u015f\u00fcpheli istek yap\u0131lar\u0131n\u0131 ve normal d\u0131\u015f\u0131 kullan\u0131c\u0131 davran\u0131\u015flar\u0131n\u0131 tan\u0131mlayabilir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00d6rne\u011fin bir form alan\u0131na veritaban\u0131 sorgusu eklenmeye \u00e7al\u0131\u015f\u0131ld\u0131\u011f\u0131nda WAF bu iste\u011fi SQL Injection giri\u015fimi olarak de\u011ferlendirebilir. Benzer \u015fekilde adres \u00e7ubu\u011fu veya form \u00fczerinden zararl\u0131 JavaScript kodu g\u00f6nderilmesi Cross-Site Scripting sald\u0131r\u0131s\u0131 olarak alg\u0131lanabilir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WAF yaln\u0131zca URL adresini incelemez. \u0130ste\u011fin ba\u015fl\u0131k bilgilerini, \u00e7erezlerini, form verilerini, sorgu parametrelerini, dosya y\u00fcklemelerini ve baz\u0131 durumlarda yan\u0131t i\u00e7eri\u011fini de kontrol edebilir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sistem \u00fc\u00e7 farkl\u0131 y\u00f6ntemle \u00e7al\u0131\u015fabilir:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u0130zin verilen davran\u0131\u015flar\u0131 temel alan g\u00fcvenlik kurallar\u0131<\/li>\n\n\n\n<li>Bilinen zararl\u0131 kal\u0131plar\u0131 engelleyen imza tabanl\u0131 kontroller<\/li>\n\n\n\n<li>Trafik davran\u0131\u015flar\u0131n\u0131 inceleyen anomali tespiti<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Bu y\u00f6ntemler birlikte kullan\u0131ld\u0131\u011f\u0131nda daha kapsaml\u0131 bir koruma sa\u011flanabilir.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"428\" src=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/koruma-1024x428.png\" alt=\"\" class=\"wp-image-9021\" srcset=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/koruma-1024x428.png 1024w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/koruma-300x125.png 300w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/koruma-1536x642.png 1536w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/koruma-990x414.png 990w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/koruma-1320x552.png 1320w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/koruma.png 1939w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WAF_Hangi_Saldirilara_Karsi_Koruma_Saglar\"><\/span>WAF Hangi Sald\u0131r\u0131lara Kar\u015f\u0131 Koruma Sa\u011flar?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">WAF, web uygulamas\u0131 katman\u0131n\u0131 hedefleyen bir\u00e7ok sald\u0131r\u0131n\u0131n engellenmesine yard\u0131mc\u0131 olur.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"SQL_Injection\"><\/span>SQL Injection<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">SQL Injection sald\u0131r\u0131lar\u0131nda uygulaman\u0131n veritaban\u0131 sorgular\u0131 manip\u00fcle edilmeye \u00e7al\u0131\u015f\u0131l\u0131r. Ba\u015far\u0131l\u0131 bir sald\u0131r\u0131 sonucunda veriler g\u00f6r\u00fcnt\u00fclenebilir, de\u011fi\u015ftirilebilir veya silinebilir. WAF, isteklerdeki \u015f\u00fcpheli SQL ifadelerini tespit ederek sald\u0131r\u0131n\u0131n uygulamaya ula\u015fmas\u0131n\u0131 \u00f6nleyebilir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Cross-Site_Scripting\"><\/span>Cross-Site Scripting<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Cross-Site Scripting, k\u0131saca XSS, web sayfas\u0131na zararl\u0131 istemci kodu eklenmesini ama\u00e7lar. Bu kod ziyaret\u00e7ilerin taray\u0131c\u0131s\u0131nda \u00e7al\u0131\u015farak oturum bilgilerinin ele ge\u00e7irilmesine veya kullan\u0131c\u0131lar\u0131n sahte sayfalara y\u00f6nlendirilmesine neden olabilir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WAF, form alanlar\u0131nda ve URL parametrelerinde bulunan \u015f\u00fcpheli komutlar\u0131 inceleyerek bu t\u00fcr giri\u015fimleri s\u0131n\u0131rland\u0131rabilir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Dosya_Dahil_Etme_Saldirilari\"><\/span>Dosya Dahil Etme Sald\u0131r\u0131lar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Baz\u0131 sald\u0131r\u0131larda uygulamaya d\u0131\u015far\u0131dan zararl\u0131 dosya veya sistem \u00fczerindeki hassas bir dosya dahil edilmeye \u00e7al\u0131\u015f\u0131l\u0131r. WAF, \u015f\u00fcpheli dosya yollar\u0131n\u0131 ve bilinen sald\u0131r\u0131 kal\u0131plar\u0131n\u0131 kontrol ederek bu istekleri engelleyebilir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Zararli_Bot_Trafigi\"><\/span>Zararl\u0131 Bot Trafi\u011fi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Otomatik botlar giri\u015f sayfalar\u0131na yo\u011fun parola denemesi yapabilir, g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 tarayabilir veya formlar\u0131 spam ama\u00e7l\u0131 kullanabilir. WAF, istek s\u0131kl\u0131\u011f\u0131 ve davran\u0131\u015f \u00f6zelliklerine g\u00f6re bu trafi\u011fi s\u0131n\u0131rland\u0131rabilir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Kotu_Amacli_Dosya_Yuklemeleri\"><\/span>K\u00f6t\u00fc Ama\u00e7l\u0131 Dosya Y\u00fcklemeleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Dosya y\u00fckleme alanlar\u0131 yanl\u0131\u015f yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131nda zararl\u0131 komut dosyalar\u0131 sunucuya g\u00f6nderilebilir. WAF, dosya uzant\u0131s\u0131, i\u00e7erik t\u00fcr\u00fc ve istek yap\u0131s\u0131 \u00fczerinden riskli y\u00fcklemeleri tespit etmeye yard\u0131mc\u0131 olabilir.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"428\" src=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/klasik-1024x428.png\" alt=\"\" class=\"wp-image-9022\" srcset=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/klasik-1024x428.png 1024w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/klasik-300x125.png 300w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/klasik-1536x642.png 1536w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/klasik-990x414.png 990w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/klasik-1320x552.png 1320w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/klasik.png 1939w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WAF_ile_Klasik_Guvenlik_Duvari_Arasindaki_Fark_Nedir\"><\/span>WAF ile Klasik G\u00fcvenlik Duvar\u0131 Aras\u0131ndaki Fark Nedir?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Klasik g\u00fcvenlik duvar\u0131, sunucuya gelen a\u011f ba\u011flant\u0131lar\u0131n\u0131 IP adresi, port ve protokol bilgilerine g\u00f6re kontrol eder. \u00d6rne\u011fin yaln\u0131zca 80 ve 443 numaral\u0131 web portlar\u0131na izin verip di\u011fer ba\u011flant\u0131lar\u0131 engelleyebilir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WAF ise web trafi\u011finin i\u00e7eri\u011fine odaklan\u0131r. Bir HTTP iste\u011finin hangi form verisini ta\u015f\u0131d\u0131\u011f\u0131n\u0131, URL parametresinde ne bulundu\u011funu ve iste\u011fin bilinen bir sald\u0131r\u0131 modeliyle e\u015fle\u015fip e\u015fle\u015fmedi\u011fini inceler.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bu nedenle iki g\u00fcvenlik sistemi birbirinin alternatifi de\u011fildir. Klasik g\u00fcvenlik duvar\u0131 a\u011f katman\u0131n\u0131 korurken WAF uygulama katman\u0131nda ek g\u00fcvenlik sa\u011flar.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"428\" src=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/tur-1024x428.png\" alt=\"\" class=\"wp-image-9023\" srcset=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/tur-1024x428.png 1024w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/tur-300x125.png 300w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/tur-1536x642.png 1536w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/tur-990x414.png 990w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/tur-1320x552.png 1320w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/tur.png 1939w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WAF_Turleri_Nelerdir\"><\/span>WAF T\u00fcrleri Nelerdir?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">WAF \u00e7\u00f6z\u00fcmleri \u00e7al\u0131\u015fma konumuna ve y\u00f6netim yap\u0131s\u0131na g\u00f6re farkl\u0131 t\u00fcrlerde sunulabilir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Bulut_Tabanli_WAF\"><\/span>Bulut Tabanl\u0131 WAF<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Bulut tabanl\u0131 WAF hizmetlerinde alan ad\u0131n\u0131n trafi\u011fi g\u00fcvenlik sa\u011flay\u0131c\u0131s\u0131n\u0131n a\u011f\u0131 \u00fczerinden ge\u00e7irilir. Zararl\u0131 istekler ana sunucuya ula\u015fmadan \u00f6nce filtrelenir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kurulumu genellikle DNS y\u00f6nlendirmesi \u00fczerinden yap\u0131l\u0131r. DDoS korumas\u0131, bot y\u00f6netimi ve CDN gibi ek hizmetlerle birlikte sunulabilir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Sunucu_Uzerinde_Calisan_WAF\"><\/span>Sunucu \u00dczerinde \u00c7al\u0131\u015fan WAF<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Bu yap\u0131da g\u00fcvenlik yaz\u0131l\u0131m\u0131 do\u011frudan web sunucusunda veya kontrol paneli altyap\u0131s\u0131nda \u00e7al\u0131\u015f\u0131r. ModSecurity bu y\u00f6ntemde kullan\u0131lan yayg\u0131n \u00e7\u00f6z\u00fcmlerden biridir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kurallar sunucu y\u00f6neticisi taraf\u0131ndan \u00f6zelle\u015ftirilebilir. Ancak analiz i\u015flemleri sunucu kaynaklar\u0131n\u0131 kulland\u0131\u011f\u0131 i\u00e7in yanl\u0131\u015f yap\u0131land\u0131rma performans\u0131 etkileyebilir.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Donanim_Tabanli_WAF\"><\/span>Donan\u0131m Tabanl\u0131 WAF<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Donan\u0131m tabanl\u0131 \u00e7\u00f6z\u00fcmler genellikle y\u00fcksek trafik alan kurumsal altyap\u0131larda tercih edilir. A\u011f \u00fczerinde fiziksel veya sanal cihaz olarak konumland\u0131r\u0131l\u0131r ve geli\u015fmi\u015f y\u00f6netim \u00f6zellikleri sunar.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bu yap\u0131 y\u00fcksek maliyet ve uzman y\u00f6netimi gerektirebildi\u011finden standart web projelerinde daha az kullan\u0131l\u0131r.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"428\" src=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Avantaj-2-1024x428.png\" alt=\"\" class=\"wp-image-9024\" srcset=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Avantaj-2-1024x428.png 1024w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Avantaj-2-300x125.png 300w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Avantaj-2-1536x642.png 1536w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Avantaj-2-990x414.png 990w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Avantaj-2-1320x552.png 1320w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Avantaj-2.png 1939w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WAF_Kullanmanin_Avantajlari_Nelerdir\"><\/span>WAF Kullanman\u0131n Avantajlar\u0131 Nelerdir?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">WAF, bilinen sald\u0131r\u0131 y\u00f6ntemlerini uygulama koduna ula\u015fmadan engelleyerek g\u00fcvenlik riskini azalt\u0131r. \u00d6zellikle g\u00fcncellemesi geciken yaz\u0131l\u0131mlarda veya hen\u00fcz d\u00fczeltilmemi\u015f g\u00fcvenlik a\u00e7\u0131klar\u0131nda ge\u00e7ici koruma sa\u011flayabilir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Zararl\u0131 botlar\u0131n, otomatik taramalar\u0131n ve yo\u011fun giri\u015f denemelerinin s\u0131n\u0131rland\u0131r\u0131lmas\u0131 sunucu kaynaklar\u0131n\u0131n daha dengeli kullan\u0131lmas\u0131na yard\u0131mc\u0131 olur. Ayr\u0131ca sald\u0131r\u0131 kay\u0131tlar\u0131 incelenerek web sitesinin hangi y\u00f6ntemlerle hedef al\u0131nd\u0131\u011f\u0131 g\u00f6r\u00fclebilir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Baz\u0131 WAF sistemleri \u00fclke, IP adresi, kullan\u0131c\u0131 arac\u0131s\u0131 veya URL baz\u0131nda \u00f6zel kurallar olu\u015fturulmas\u0131na izin verir. B\u00f6ylece y\u00f6netim paneli gibi hassas b\u00f6l\u00fcmlere y\u00f6nelik eri\u015fim daha s\u0131k\u0131 bi\u00e7imde kontrol edilebilir.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"428\" src=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/tek-1024x428.png\" alt=\"\" class=\"wp-image-9025\" srcset=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/tek-1024x428.png 1024w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/tek-300x125.png 300w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/tek-1536x642.png 1536w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/tek-990x414.png 990w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/tek-1320x552.png 1320w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/tek.png 1939w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WAF_Tek_Basina_Yeterli_midir\"><\/span>WAF Tek Ba\u015f\u0131na Yeterli midir?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">WAF \u00f6nemli bir g\u00fcvenlik katman\u0131 olsa da web sitesindeki t\u00fcm g\u00fcvenlik sorunlar\u0131n\u0131 tek ba\u015f\u0131na ortadan kald\u0131rmaz. G\u00fcncel olmayan eklentiler, zay\u0131f parolalar, hatal\u0131 dosya izinleri ve g\u00fcvenli olmayan yaz\u0131l\u0131m kodlar\u0131 risk olu\u015fturmaya devam eder.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Web sitesi yaz\u0131l\u0131mlar\u0131 d\u00fczenli olarak g\u00fcncellenmeli, g\u00fc\u00e7l\u00fc parolalar kullan\u0131lmal\u0131 ve gereksiz eklentiler kald\u0131r\u0131lmal\u0131d\u0131r. Dosya izinleri kontrol edilmeli, yedekleme plan\u0131 olu\u015fturulmal\u0131 ve y\u00f6netim paneli eri\u015fimleri m\u00fcmk\u00fcn oldu\u011funca s\u0131n\u0131rland\u0131r\u0131lmal\u0131d\u0131r.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WAF, bu \u00f6nlemlerin yerine ge\u00e7mek yerine onlar\u0131 tamamlayan bir koruma katman\u0131 olarak de\u011ferlendirilmelidir.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"428\" src=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Dikkat-7-1024x428.png\" alt=\"\" class=\"wp-image-9026\" srcset=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Dikkat-7-1024x428.png 1024w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Dikkat-7-300x125.png 300w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Dikkat-7-1536x642.png 1536w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Dikkat-7-990x414.png 990w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Dikkat-7-1320x552.png 1320w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Dikkat-7.png 1939w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WAF_Yapilandirilirken_Nelere_Dikkat_Edilmelidir\"><\/span>WAF Yap\u0131land\u0131r\u0131l\u0131rken Nelere Dikkat Edilmelidir?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">G\u00fcvenlik kurallar\u0131n\u0131n a\u015f\u0131r\u0131 s\u0131k\u0131 yap\u0131land\u0131r\u0131lmas\u0131 normal kullan\u0131c\u0131 isteklerinin engellenmesine neden olabilir. Bu durum \u201cfalse positive\u201d olarak adland\u0131r\u0131l\u0131r. \u00d6rne\u011fin y\u00f6netim panelinde yap\u0131lan ge\u00e7erli bir i\u015flem, i\u00e7erdi\u011fi \u00f6zel karakterler nedeniyle sald\u0131r\u0131 olarak alg\u0131lanabilir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Bu nedenle engellenen istek kay\u0131tlar\u0131 d\u00fczenli olarak incelenmeli ve gerekli durumlarda g\u00fcvenli istisnalar olu\u015fturulmal\u0131d\u0131r. Ancak bir kural tamamen devre d\u0131\u015f\u0131 b\u0131rak\u0131lmadan \u00f6nce olu\u015fturabilece\u011fi risk de\u011ferlendirilmelidir.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WAF kurallar\u0131 g\u00fcncel tutulmal\u0131 ve kullan\u0131lan web uygulamas\u0131n\u0131n yap\u0131s\u0131na uygun bi\u00e7imde d\u00fczenlenmelidir. WordPress, OpenCart veya \u00f6zel yaz\u0131l\u0131m projelerinde ihtiya\u00e7 duyulan kurallar birbirinden farkl\u0131 olabilir.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Sonuc\"><\/span>Sonu\u00e7<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Web Uygulamas\u0131 G\u00fcvenlik Duvar\u0131, HTTP ve HTTPS trafi\u011fini analiz ederek web uygulamalar\u0131na y\u00f6neltilen zararl\u0131 istekleri engellemeye yard\u0131mc\u0131 olur. SQL Injection, XSS, k\u00f6t\u00fc ama\u00e7l\u0131 dosya y\u00fckleme ve zararl\u0131 bot trafi\u011fi gibi tehditlere kar\u015f\u0131 uygulama katman\u0131nda koruma sa\u011flar.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/www.domainhizmetleri.com\/limitsiz-hosting\/\" target=\"_blank\" rel=\" noreferrer noopener\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"290\" src=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Limitsiz-hosting-reklamm-1024x290.png\" alt=\"\" class=\"wp-image-8461\" srcset=\"https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Limitsiz-hosting-reklamm-1024x290.png 1024w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Limitsiz-hosting-reklamm-300x85.png 300w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Limitsiz-hosting-reklamm-1536x435.png 1536w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Limitsiz-hosting-reklamm-scaled.png 2048w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Limitsiz-hosting-reklamm-990x280.png 990w, https:\/\/www.domainhizmetleri.com\/blog\/wp-content\/uploads\/Limitsiz-hosting-reklamm-1320x374.png 1320w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Domainhizmetleri olarak h\u0131zl\u0131, g\u00fcvenli ve stabil hosting altyap\u0131m\u0131zla web projelerinize uygun \u00e7\u00f6z\u00fcmler sunuyoruz. G\u00fcvenlik katmanlar\u0131yla desteklenen hosting hizmetlerimizden yararlanarak web sitenizin daha g\u00fcvenli bir ortamda yay\u0131nlanmas\u0131n\u0131 sa\u011flayabilirsiniz.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Web siteleri ve \u00e7evrim i\u00e7i uygulamalar; zararl\u0131 botlar, otomatik sald\u0131r\u0131lar, k\u00f6t\u00fc ama\u00e7l\u0131 istekler ve yetkisiz eri\u015fim giri\u015fimleriyle kar\u015f\u0131 kar\u015f\u0131ya kalabilir. Sunucu g\u00fcvenli\u011fi i\u00e7in kullan\u0131lan klasik g\u00fcvenlik duvarlar\u0131 a\u011f trafi\u011fini kontrol ederken web uygulamalar\u0131n\u0131 hedef alan sald\u0131r\u0131lar i\u00e7in daha \u00f6zel bir koruma katman\u0131na ihtiya\u00e7 duyulur. Bu rehberde Web Uygulamas\u0131 G\u00fcvenlik Duvar\u0131, yani WAF nedir, nas\u0131l \u00e7al\u0131\u015f\u0131r, [&hellip;]<\/p>\n","protected":false},"author":17,"featured_media":9019,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[145],"tags":[31,311,24,18,81,310],"class_list":["post-9017","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nedir-nasil","tag-cpanel","tag-guvenlik-duvari","tag-linux","tag-php","tag-plesk-panel","tag-waf"],"views":5,"_links":{"self":[{"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/posts\/9017","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/comments?post=9017"}],"version-history":[{"count":1,"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/posts\/9017\/revisions"}],"predecessor-version":[{"id":9027,"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/posts\/9017\/revisions\/9027"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/media\/9019"}],"wp:attachment":[{"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/media?parent=9017"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/categories?post=9017"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.domainhizmetleri.com\/blog\/wp-json\/wp\/v2\/tags?post=9017"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}