We have added signatures to WAF-as-a-Service to block exploits of Apache Log4j Critical Vulnerability (CVE-2021-44228). This involves protection of headers, cookies, and parameters.

The protections in WAF-as-a-Service are being updated often to block the latest variants and permutations we are seeing in the field.

For further information and updates, see this article on Barracuda Campus: https://campus.barracuda.com/doc/96024300/