Re: WAF (Web Application Firewall)

Folks,
     The ACE is a load balancer. Period. Not a WAF. Apples to oranges.

-Hammer-

"I was a normal American nerd"
-Jack Herer

On 09/23/2011 09:22 AM, solomonawosina_at_gmail.com wrote:
> I have use Barracuda WAF and it is not a bad product.
>
> I think i better than Cisco ACE.
>
> Sent from my BlackBerry wireless device from MTN
>
> -----Original Message-----
> From: David Bass<davidbass570_at_gmail.com>
> Sender: nobody_at_groupstudy.com
> Date: Fri, 23 Sep 2011 09:02:01
> To: -Hammer-<bhmccie_at_gmail.com>
> Reply-To: David Bass<davidbass570_at_gmail.com>
> Cc: ccielab_at_groupstudy.com<ccielab_at_groupstudy.com>
> Subject: Re: WAF (Web Application Firewall)
>
> I'll second this. ACE would've been a good product in 2001, and it's not a FW although you could potentially make it do it.
>
> Citrix makes an awesome product in the Netscaler line. Palo Alto makes a great product as well, but it's purely firewall.
>
> HTH
>
>
>
> On Sep 23, 2011, at 8:44 AM, -Hammer-<bhmccie_at_gmail.com> wrote:
>
>
>> OK. Speaking as someone who's done application firewalls for about 8
>> years (back before anyone had heard of them) I can tell you Cisco is NOT
>> the WAF solution you want. The Cisco ACE is not a WAF. It's a load
>> balancer and a crappy one at that. YES. I own several ACEs and we were
>> an early adopter. That's why we're phasing them out. Cisco ASA is the
>> moving forward "firewall" universe and it will include this
>> functionality in different products under the ASA name in the near
>> future. But I would not recommend jumping in with both feet.
>>
>> We used to use Kavado (years ago and now defunct) and moved to Teros.
>> Teros was acquired by Citrix. Citrix has a network appliance group
>> called ANG (Application Networking Group) that they sell their load
>> balancers and application firewalls thru. They are called the NetScaler
>> line. They are top end appliances for enterprise environments. Great
>> stuff. I highly recommend them.
>>
>> F5 has a great solution as well. We have used it in the past but decided
>> to stick with NetScaler.
>>
>> There are also some software products out there that (depending on your
>> volume and design) may be suitable.
>>
>> Let me know if you have any additional questions regarding this.
>>
>> -Hammer-
>>
>> "I was a normal American nerd"
>> -Jack Herer
>>
>>
>>
>> On 09/23/2011 07:34 AM, Iam Here wrote:
>>
>>> You mean that the SW version will not be suitable
>>>
>>>
>>>
>>>> Date: Fri, 23 Sep 2011 17:12:47 +1000
>>>> Subject: Re: WAF (Web Application Firewall)
>>>> From: pbhatkoti_at_gmail.com
>>>> To: manserkhan_at_gmail.com
>>>> CC: go_soon2010_at_hotmail.com; muhammad.nasim_at_gmail.com; ccielab_at_groupstudy.com
>>>>
>>>> Unfortunately F5 VE sux!
>>>> Try loading 700+ Mb traffic on F5 ASM - it will die ..
>>>>
>>>> On Fri, Sep 23, 2011 at 4:05 PM, Anser Gmail<manserkhan_at_gmail.com> wrote:
>>>>
>>>>
>>>>
>>>>> Check 'Astaro' Web Applulication Firewall. Its a dedicated HW FW
>>>>>
>>>>> Sent from my iPhone
>>>>>
>>>>> On Sep 23, 2011, at 2:02 AM, Iam Here<go_soon2010_at_hotmail.com> wrote:
>>>>>
>>>>>
>>>>>
>>>>>> Are there any Software products ?
>>>>>>
>>>>>>
>>>>>>
>>>>>>> From: muhammad.nasim_at_gmail.com
>>>>>>> Date: Fri, 23 Sep 2011 01:39:21 +0300
>>>>>>> Subject: Re: WAF (Web Application Firewall)
>>>>>>> To: go_soon2010_at_hotmail.com
>>>>>>> CC: ccielab_at_groupstudy.com
>>>>>>>
>>>>>>> hi , checkout cisco waf solution.
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> On Fri, Sep 23, 2011 at 1:24 AM, Iam Here<go_soon2010_at_hotmail.com>
>>>>>>>
>>>>>>>
>>>>> wrote:
>>>>>
>>>>>
>>>>>>>
>>>>>>>> I have an Web Application Server and I'd like to protect it with Web
>>>>>>>> Application Firewall product (HW or SW)
>>>>>>>> any recommendations will be appreciated
>>>>>>>>
>>>>>>>>
>>>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>>>
>>>>>>>> _______________________________________________________________________
>>>>>>>> Subscription information may be found at:
>>>>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>> --
>>>>>>> Muhammad Nasim
>>>>>>>
>>>>>>>
>>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>>
>>>>>>> _______________________________________________________________________
>>>>>>> Subscription information may be found at:
>>>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>>>
>>>>>>>
>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>
>>>>>> _______________________________________________________________________
>>>>>> Subscription information may be found at:
>>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>>
>>>>>>
>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>
>>>>> _______________________________________________________________________
>>>>> Subscription information may be found at:
>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>
>>>>>
>>>> Blogs and organic groups at http://www.ccie.net
>>>>
>>>> _______________________________________________________________________
>>>> Subscription information may be found at:
>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>
>>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Fri Sep 23 2011 - 09:41:09 ART