diff --git a/waf/incapsula.py b/waf/incapsula.py
index 5fb25533a..2a42d6acd 100644
--- a/waf/incapsula.py
+++ b/waf/incapsula.py
@@ -18,6 +18,7 @@ def detect(get_page):
     for vector in WAF_ATTACK_VECTORS:
         page, headers, code = get_page(get=vector)
         retval = re.search(r"incap_ses|visid_incap", headers.get(HTTPHEADER.SET_COOKIE, ""), re.I) is not None
+        retval |= re.search(r"Incapsula", headers.get("X-CDN", ""), re.I) is not None
         if retval:
             break