AppWall: Protect Critical Web Applications with Radware Web Application Firewall.

APSolute Web Security and Compliance with AppWall: Taking Web Application Security to the Next Level

Radware’s AppWall^® is a Web Application Firewall (WAF) appliance that secures Web applications and enables PCI compliance by mitigating web application security threats and vulnerabilities. It prevents data theft and manipulation of sensitive corporate and customer information.

Complete Web Application Protection

• Full coverage out-of-the-box of OWASP top-10 threats ─including injections, cross site scripting (XSS), cross site request forgery (CSRF), broken authentication and session management and security mis-configuration .
• Data leak prevention – identifying and blocking sensitive information transmission such as credit card numbers (CCN) and social security numbers (SSN).
• Zero-day attacks prevention – AppWall positive security profiles limiting the user input only to the level required by the application to properly function, thus blocking also zero day attacks. The positive security profiles are a proven protection against zero-day attacks.
• Protocol validation – AppWall enables HTTP standards compliance to prevent evasion techniques and protocol exploits.
• XML and Web services protection - AppWall offers a rich set of XML and web services security protections, including XML validity check web services method restrictions, XML structure validation to enforce legitimate SOAP messages and XML payloads.
• Web application vulnerabilities – signature protection offer the most accurate detection and blocking technology of web application vulnerability exploits. AppWall negative security profiles offers comprehensive attack protection.

Fully Addresses PCI DSS 2.0 Requirement 6.6

The Payment Card Industry (PCI) issued Data Security Standard (DSS) to prevent financial fraud and information leak from on-line businesses processing credit cards. AppWall fully addresses requirement 6.6 by:

• Protecting credit card numbers leakage and use of web hacking techniques to disclose information processed through web applications
• Out-of-the-box PCI policies
• PCI compliance reports

The Secret Sauce: Adaptive Policy Creation

AppWall offers patent-protected technology to create and maintain security policies for widest security coverage with lowest false positives and lowest operational effort.

Once enabling the auto policy generation module, AppWall analyzes the security related attributes of the protected web application and derives the potential threats in the application. The web application is mapped into application zone, each with its own common potential threats. It then generates granular protection rules per each zone and sets a policy in blocking mode once it has completed an optimization process that minimizes false-positives while maintaining best security coverage.

Integral Part of the Application Delivery Solution

As AppWall is an integral part of Radware’s suite of Application Delivery Controller (ADC) solutions, customers can augment their Web application security protection with: local and global traffic redirection, application acceleration, bandwidth management, and other application-aware services, all while benefitting from a standardized hardware platform. Combining AppWall with Radware ADC solution provides a comprehensive set of availability, acceleration, and security services designed to ensure the fast, reliable, and secure delivery of mission-critical Web applications.

Complete Network and Application Security Solution

Radware’s award winning DefensePro™ is a real-time network attack prevention device that protects your application infrastructure against network & application downtime, application vulnerability exploitation, malware spread, Information theft and other emerging network attacks. DefensePro includes the set of security modules - DoS Protection, Network Behavioral Analysis (NBA), Intrusion Prevention (IPS) and Reputation Engine - to fully protect networks against known and emerging network security threats.

Together with AppWall we offer you the best network and web application security solution for your data center and on-line applications.