
Deny All Web Application Firewall automatically detects and immediately blocks known attacks and potential threats against web applications, offering significant cost advantages and effectiveness to comply with PCI DSS.
With a global application delivery architecture, Deny All WAF is an efficient solution to securing applications, enhancing web application performance and complying with the PCI DSS standard
Fail-Safe Security to Protect Confidential and Critical Data
Deny All Web Application Firewall delivers immediate protection against known and new web-based threats.
The product’s filtering methodology is based on an optimised reverse proxy technology, including Black List, behaviour analysis, White List and Third Party anti-virus programs.
Automated and Continuous Updates to Guarantee the 24/7 Web Application Security
All filters are updated automatically and continuously by Deny All. The dynamic auto-learning functions of the White List, generates and maintains accurate filtering rules and guarantees the highest level of security
Acceleration and Simplification Functions to Insure High Availability to Your Web Applications
By combining acceleration and simplification functions, the Deny All WAF solution offers a global application security delivery to dramatically enhance an organization’s web infrastructure environment.
To guarantee both performance and availability, Deny All WAF incorporates a powerful and comprehensive Web/SSL accelerator and allows centralised user authentication.
Flexible Security Levels for Global and Customized Security Management
The level of filtering (updates of security rules for a potential threat transaction) can be customized via the graphical user interface to adapt the Deny All WAF to meet your required security policies.
Easy to deploy, configure and replicate allowing the best quality of service for every application, in every location.
Cost effective and Lower TCO
One appliance or licence protects over 100 applications. It would not be reasonable to audit millions of lines of code and would add potential security risks from potential errors and oversight.
1.1.3, 1.3 and 1.4: isolation of DMZs;
2.2, 2.4: black list blocking with standard passwords, very complete black list (more than 1000 signatures) and hardened appliance , administrative access is encrypted;
4: SSL encryption in both directions (in and out);
5: detection of worms and optional transmission of uploaded file data to antivirus software;
6.1, 6.2, 6.3, 6.5 : comprehensive list of security features giving protection against known attacks (and also against some unknown or generic ones);
6.3.2: synchronization between environments;
6.4: logs and white list-update automation;
7: Role Based Access Control scheme for administration;
8.3, 8.3: Support for several common authentication schemes;
10: detailed logs, customizable and syslog compatible;
11: non-regression testing via a dedicated tool;
11.4: intrusion detection and behaviour analysis at HTTP level (much finer than raw TPC/IP level).