Re: WAF (Web Application Firewall)

OK. Speaking as someone who's done application firewalls for about 8
years (back before anyone had heard of them) I can tell you Cisco is NOT
the WAF solution you want. The Cisco ACE is not a WAF. It's a load
balancer and a crappy one at that. YES. I own several ACEs and we were
an early adopter. That's why we're phasing them out. Cisco ASA is the
moving forward "firewall" universe and it will include this
functionality in different products under the ASA name in the near
future. But I would not recommend jumping in with both feet.

We used to use Kavado (years ago and now defunct) and moved to Teros.
Teros was acquired by Citrix. Citrix has a network appliance group
called ANG (Application Networking Group) that they sell their load
balancers and application firewalls thru. They are called the NetScaler
line. They are top end appliances for enterprise environments. Great
stuff. I highly recommend them.

F5 has a great solution as well. We have used it in the past but decided
to stick with NetScaler.

There are also some software products out there that (depending on your
volume and design) may be suitable.

Let me know if you have any additional questions regarding this.

-Hammer-

"I was a normal American nerd"
-Jack Herer

On 09/23/2011 07:34 AM, Iam Here wrote:
> You mean that the SW version will not be suitable
>
>
>> Date: Fri, 23 Sep 2011 17:12:47 +1000
>> Subject: Re: WAF (Web Application Firewall)
>> From: pbhatkoti_at_gmail.com
>> To: manserkhan_at_gmail.com
>> CC: go_soon2010_at_hotmail.com; muhammad.nasim_at_gmail.com; ccielab_at_groupstudy.com
>>
>> Unfortunately F5 VE sux!
>> Try loading 700+ Mb traffic on F5 ASM - it will die ..
>>
>> On Fri, Sep 23, 2011 at 4:05 PM, Anser Gmail<manserkhan_at_gmail.com> wrote:
>>
>>
>>> Check 'Astaro' Web Applulication Firewall. Its a dedicated HW FW
>>>
>>> Sent from my iPhone
>>>
>>> On Sep 23, 2011, at 2:02 AM, Iam Here<go_soon2010_at_hotmail.com> wrote:
>>>
>>>
>>>> Are there any Software products ?
>>>>
>>>>
>>>>> From: muhammad.nasim_at_gmail.com
>>>>> Date: Fri, 23 Sep 2011 01:39:21 +0300
>>>>> Subject: Re: WAF (Web Application Firewall)
>>>>> To: go_soon2010_at_hotmail.com
>>>>> CC: ccielab_at_groupstudy.com
>>>>>
>>>>> hi , checkout cisco waf solution.
>>>>>
>>>>>
>>>>>
>>>>> On Fri, Sep 23, 2011 at 1:24 AM, Iam Here<go_soon2010_at_hotmail.com>
>>>>>
>>> wrote:
>>>
>>>>>
>>>>>> I have an Web Application Server and I'd like to protect it with Web
>>>>>> Application Firewall product (HW or SW)
>>>>>> any recommendations will be appreciated
>>>>>>
>>>>>>
>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>
>>>>>> _______________________________________________________________________
>>>>>> Subscription information may be found at:
>>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>> --
>>>>> Muhammad Nasim
>>>>>
>>>>>
>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>
>>>>> _______________________________________________________________________
>>>>> Subscription information may be found at:
>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>
>>>>
>>>> Blogs and organic groups at http://www.ccie.net
>>>>
>>>> _______________________________________________________________________
>>>> Subscription information may be found at:
>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>
>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Fri Sep 23 2011 - 08:44:21 ART