For less than one third of the price of a traditional web application firewall, customers can easily set up a dual server, dual node Profense configuration that includes load balancing and allows for complete redundancy and high availability
Victoria, BC and Copenhagen, Denmark (Vocus/PRWEB) March 09, 2011
Armorlogic, a leading developer of web application firewall and load balancing software, today announced that its newest Profense Web Application Firewall version 3.0 is immediately available for trial and purchase. The powerful new version of the Profense WAF adds SSL Client Authentication and HTTP request throttling to its broad suite of features and functionality including protection against all the OWASP Top Ten vulnerabilities.
SSL Client Authentication is increasingly important as governments and larger institutions look for new ways of improving web application security and optimizing the authentication performance. Client-authenticated SSL sessions offer significant security over just server-authenticated SSL sessions + userid/passwords. Client authentication necessarily proves the identity of the client and authenticating both ends is a further prevention against man-in-the-middle attacks so it does improve cryptological strength. Allowing SSL Client Authentication using a reverse proxy Web Application Firewall is necessary for PCI DSS section 6.6 version 2.0 compliance.
HTTP request throttling and connection limiting offer improved protection against Denial of Service (DOS), brute force attempts and other rate based attacks, and also ensure that resources are optimized in peak situations.
This new version of the Profense WAF also adds easy to use default settings and templates, combined with improved granularity levels, which allow you to easily and quickly put websites behind the WAF but also allow the user to dial up different levels of security and protection for each website and web application. Access to web applications is increasingly crucial to most businesses and to be effective, the web application firewall must be configurable in terms of which violations get blocked and which are initially observed for each web application.
Profense has been generating a lot of interest as the most powerful and only fully featured software appliance-based web site and web application security solution. While web application firewalls in the past have been tied to expensive proprietary hardware, Profense is instead an easy to use, easy to install “soft appliance” that runs on any common server and virtual platforms like VMWare. This independence from hardware leads to easier redundancy and more flexibility around multi-node setup. “For less than half the price of a traditional web application firewall, customers can easily set up a dual server, dual node Profense configuration that includes load balancing and allows for complete redundancy and high availability,” says Armorlogic Vice President, Jakob Gercke.
Armorlogic is the developer of Profense™ web application firewall software solutions that provide cost effective and easily implemented proactive web security and protection for web sites and web applications. Profense provides complete OWASP Top Ten vulnerability protection and fully complies with and satisfies the Payment Card Industry Data Security Standard (PCI DSS) requirements. Armorlogic’s Profense line of web application firewalls also include auto learning, advanced load balancing, acceleration, high availability (including active/active), session persistence and compression, and XML, JSON and SOAP support. Armorlogic also offers the Profense Web Load Balancer with industry leading performance at a fraction of the price of other load balancers. For further information or to download a free trial of Profense Web Application Firewall or Load Balancer, please visit http://www.armorlogic.com.