Secure Applications and Confidently Meet Compliance Requirements
“The Riverbed Stingray Application Firewall provides an additional layer of security, giving us peace of mind and optimum protection for our online presence.”
—Rob Wilmshurst, CEO, See Tickets
Attacks against web applications are increasing in sophistication, and automation makes them increasingly common. These attacks are geared towards discovering and exploiting weak points, not at the network level, but in the application code and framework itself. However, the target of the attacks remains the same – visitors’ confidential information.
Riverbed® Stingray™ Application Firewall is a sophisticated, application-aware, web application firewall for deep application security. Now it’s possible to protect against known and unknown attacks at the application layer, secure applications, and meet compliance requirements with confidence.
A strong security layer is a necessary component for any complex web application that handles sensitive data. No matter how carefully developed and audited application code may be, vulnerabilities may still exist in both the application and the framework that supports it. Stingray Application Firewall adds an additional wall of protection to increase application security.
Detect and defend against common application vulnerabilities. Many attack processes seek to discover common weak points such as unchecked input data, insecure application configuration, and weak authentication. Such discoveries can lead an attacker to draw on a library of SQL injection, cross-site scripting, or session hijacking attacks. Stingray Application Firewall contains a comprehensive set of baseline signatures and identification tools that detect and block these exploratory requests.
Proactively secure applications. Stingray Application Firewall surrounds applications with a strong security perimeter that establishes a secure session identifier, proactively encrypts cookies and URLs, and applies site usage enforcement. Such security measures ensure that users are unable to exploit the stateless nature of HTTP transactions.
Develop sophisticated security policies. No two applications are the same. That’s why Stingray Application Firewall monitors and learns common application usage patterns. Ruleset suggestions can be inspected by the security officer, and then run in ‘shadow’ mode for testing purposes before being deployed to enforce user behavior. Whitelists and blacklists quickly simplify and accelerate security rules to improve performance and reduce complexity.
Monitor and report. No security system can be deployed and managed with confidence without full audit tracking and logging. Stingray Application Firewall provides a number of reports for various purposes, ranging from immediate real-time alerts to weekly or monthly reports that outline attack trends and application behavior.
Standalone web application firewall or optional component for Stingray Traffic Manager
Stingray Application Firewall is available as a component of Stingray Traffic Manager, providing a fully integrated application delivery controller and web application firewall system.
Stingray Application Firewall is also available in a uniquely scalable, clustered architecture. Security policies are managed by an administration server and pushed out to a farm of decider processes. Enforcer modules on web and application servers capture traffic bi-directionally and forward it to available deciders for validation. Enforcer and decider components may be scaled as required to meet traffic requirements.
Sign up to our Newsletter to receive the latest ICT Product & Solution Updates and Exclusive Event Invites.
