Stingray Application Firewall
Attacks against web applications are increasing in sophistication, and automation makes them increasingly common. These attacks are geared towards discovering and exploiting weak points, not at the network level, but in the application code and framework itself. However, the target of the attacks remains the same – visitors’ confidential information.
Riverbed® Stingray™ Application Firewall is a sophisticated, application-aware, web application firewall for deep application security. Now it’s possible to protect against known and unknown attacks at the application layer, secure applications, and meet compliance requirements with confidence.
PCI DSS Compliance
PCI DSS is a key standard with which organization accepting credit card details must comply. Failure to meet the requirements of PCI DSS exposes a merchant to fraud, makes the merchant liable to costs resulting from breach of cardholder data, and incurs higher processing fees from credit providers.
The standard defines a pragmatic set of security procedures that a merchant must meet. Section 6.6 of the standard mandates that a merchant must either perform regular security reviews of the source of all public-facing applications or deploy and configure an appropriate web application firewall.
Stingray Application Firewall helps meet the requirements of PCI DSS 6.6, along with other parts of the PCI DSS standard. Stingray Application Firewall can easily be configured with additional security policies to detect and prevent attacks specific to all applications.
Stingray Application Firewall is a comprehensive, scalable software solution to
improve application security and inform on user behaviour.
Standalone web application firewall or optional component for Stingray Traffic Manager
Stingray Application Firewall is available as a component of Stingray Traffic Manager, providing a fully integrated application delivery controller and web application firewall system.
Stingray Application Firewall is also available in a uniquely scalable, clustered architecture. Security policies are managed by an administration server and pushed out to a farm of decider processes. Enforcer modules on web and application servers capture traffic bi-directionally and forward it to available deciders for validation. Enforcer and decider components may be scaled as required to meet traffic requirements.
