Re: WAF (Web Application Firewall)

I have not. Consider this though if you are new or early in the WAF
market. Your WAF(s) will be the most taxed products you employ. With the
exception of SSL offload on your LBs or WAFs, your WAFs are the only
devices that are doing complete payload inspection. Running in software
is fine on a small deployment. NOT in a large enterprise. I don't know
your environment so you will need to make that call.

-Hammer-

"I was a normal American nerd"
-Jack Herer

On 09/23/2011 09:11 AM, Radioactive Frog wrote:
> Anyone ever used Macfee sidewinder?
> It's close to what Cisco asa can do except a few things.
>
> On Sat, Sep 24, 2011 at 12:02 AM, David Bass <davidbass570_at_gmail.com
> <mailto:davidbass570_at_gmail.com>> wrote:
>
> I'll second this. ACE would've been a good product in 2001, and
> it's not a FW although you could potentially make it do it.
>
> Citrix makes an awesome product in the Netscaler line. Palo Alto
> makes a great product as well, but it's purely firewall.
>
> HTH
>
>
>
> On Sep 23, 2011, at 8:44 AM, -Hammer- <bhmccie_at_gmail.com
> <mailto:bhmccie_at_gmail.com>> wrote:
>
> > OK. Speaking as someone who's done application firewalls for about 8
> > years (back before anyone had heard of them) I can tell you
> Cisco is NOT
> > the WAF solution you want. The Cisco ACE is not a WAF. It's a load
> > balancer and a crappy one at that. YES. I own several ACEs and
> we were
> > an early adopter. That's why we're phasing them out. Cisco ASA
> is the
> > moving forward "firewall" universe and it will include this
> > functionality in different products under the ASA name in the near
> > future. But I would not recommend jumping in with both feet.
> >
> > We used to use Kavado (years ago and now defunct) and moved to
> Teros.
> > Teros was acquired by Citrix. Citrix has a network appliance group
> > called ANG (Application Networking Group) that they sell their load
> > balancers and application firewalls thru. They are called the
> NetScaler
> > line. They are top end appliances for enterprise environments. Great
> > stuff. I highly recommend them.
> >
> > F5 has a great solution as well. We have used it in the past but
> decided
> > to stick with NetScaler.
> >
> > There are also some software products out there that (depending
> on your
> > volume and design) may be suitable.
> >
> > Let me know if you have any additional questions regarding this.
> >
> > -Hammer-
> >
> > "I was a normal American nerd"
> > -Jack Herer
> >
> >
> >
> > On 09/23/2011 07:34 AM, Iam Here wrote:
> >> You mean that the SW version will not be suitable
> >>
> >>
> >>> Date: Fri, 23 Sep 2011 17:12:47 +1000
> >>> Subject: Re: WAF (Web Application Firewall)
> >>> From: pbhatkoti_at_gmail.com <mailto:pbhatkoti_at_gmail.com>
> >>> To: manserkhan_at_gmail.com <mailto:manserkhan_at_gmail.com>
> >>> CC: go_soon2010_at_hotmail.com <mailto:go_soon2010_at_hotmail.com>;
> muhammad.nasim_at_gmail.com <mailto:muhammad.nasim_at_gmail.com>;
> ccielab_at_groupstudy.com <mailto:ccielab_at_groupstudy.com>
> >>>
> >>> Unfortunately F5 VE sux!
> >>> Try loading 700+ Mb traffic on F5 ASM - it will die ..
> >>>
> >>> On Fri, Sep 23, 2011 at 4:05 PM, Anser
> Gmail<manserkhan_at_gmail.com <mailto:manserkhan_at_gmail.com>> wrote:
> >>>
> >>>
> >>>> Check 'Astaro' Web Applulication Firewall. Its a dedicated HW FW
> >>>>
> >>>> Sent from my iPhone
> >>>>
> >>>> On Sep 23, 2011, at 2:02 AM, Iam Here<go_soon2010_at_hotmail.com
> <mailto:go_soon2010_at_hotmail.com>> wrote:
> >>>>
> >>>>
> >>>>> Are there any Software products ?
> >>>>>
> >>>>>
> >>>>>> From: muhammad.nasim_at_gmail.com
> <mailto:muhammad.nasim_at_gmail.com>
> >>>>>> Date: Fri, 23 Sep 2011 01:39:21 +0300
> >>>>>> Subject: Re: WAF (Web Application Firewall)
> >>>>>> To: go_soon2010_at_hotmail.com <mailto:go_soon2010_at_hotmail.com>
> >>>>>> CC: ccielab_at_groupstudy.com <mailto:ccielab_at_groupstudy.com>
> >>>>>>
> >>>>>> hi , checkout cisco waf solution.
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> On Fri, Sep 23, 2011 at 1:24 AM, Iam
> Here<go_soon2010_at_hotmail.com <mailto:go_soon2010_at_hotmail.com>>
> >>>>>>
> >>>> wrote:
> >>>>
> >>>>>>
> >>>>>>> I have an Web Application Server and I'd like to protect
> it with Web
> >>>>>>> Application Firewall product (HW or SW)
> >>>>>>> any recommendations will be appreciated
> >>>>>>>
> >>>>>>>
> >>>>>>> Blogs and organic groups at http://www.ccie.net
> >>>>>>>
> >>>>>>>
> _______________________________________________________________________
> >>>>>>> Subscription information may be found at:
> >>>>>>> http://www.groupstudy.com/list/CCIELab.html
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>
> >>>>>> --
> >>>>>> Muhammad Nasim
> >>>>>>
> >>>>>>
> >>>>>> Blogs and organic groups at http://www.ccie.net
> >>>>>>
> >>>>>>
> _______________________________________________________________________
> >>>>>> Subscription information may be found at:
> >>>>>> http://www.groupstudy.com/list/CCIELab.html
> >>>>>>
> >>>>>
> >>>>> Blogs and organic groups at http://www.ccie.net
> >>>>>
> >>>>>
> _______________________________________________________________________
> >>>>> Subscription information may be found at:
> >>>>> http://www.groupstudy.com/list/CCIELab.html
> >>>>>
> >>>>
> >>>> Blogs and organic groups at http://www.ccie.net
> >>>>
> >>>>
> _______________________________________________________________________
> >>>> Subscription information may be found at:
> >>>> http://www.groupstudy.com/list/CCIELab.html
> >>>>
> >>>
> >>> Blogs and organic groups at http://www.ccie.net
> >>>
> >>>
> _______________________________________________________________________
> >>> Subscription information may be found at:
> >>> http://www.groupstudy.com/list/CCIELab.html
> >>>
> >>
> >> Blogs and organic groups at http://www.ccie.net
> >>
> >>
> _______________________________________________________________________
> >> Subscription information may be found at:
> >> http://www.groupstudy.com/list/CCIELab.html
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> >
> _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Fri Sep 23 2011 - 09:21:05 ART