Radware AppWall OnDemand Switch 1 XL

Features:

Easy Migration From Test Environments to Production

• AppWall VA is a Web application security tool that is useful for lab testing, and demo environments, where network, security, and application teams can quickly deploy it to test how applications and networks will respond in a production environment when managed by an AppWall device.
• Once testing is concluded, you can either deploy the application and the AppWall VA in the production environment or easily migrate from the AppWall VA policy to the AppWall appliance production environment, since AppWall VA is identical in features and capabilities to the form factors. This approach simplifies the integration between the developed application and AppWall VA and shortens the deployment time of new applications and services in the virtualized and cloud data centers.
• Alternatively, AppWall VA can be deployed in the production environment, where its advanced auto policy generation tools can be utilized to generate tailored policies for the protected application.

Integrated Web Application Security & Application Delivery

• AppWall is an integral part of Radware's suite of Application Delivery Controller (ADC) solutions, which allows customers to augment their Web application security protection with: local and global traffic redirection, application acceleration, bandwidth management, and other application-aware services, all while benefitting from a standardized hardware platform.
• Combining AppWall with Radware ADC solution provides a comprehensive set of availability, acceleration, and security services designed to ensure the fast, reliable, and secure delivery of mission-critical Web applications.

Maintain Business Continuity of Operations (COOP)

• Full protection of online revenue-generating web applications against known and zero-day web attacks
• Best solution for online businesses combining AppWall, DefensePro, ADC and APSolute Vision

Shortest Time to Protect

• Highly granular policy creation and activation
• Immediate policy modification upon application change

Minimal Impact to Business Services and Network

• Low false-positives while maintaining maximum security coverage
• Flexible deployment models to fit any network architecture

Comprehensive PCI Compliance Solution

• Fully complies with DSS 2.0 section 6.6 requirements
• Most advanced PCI compliance reports with action plan to achieve compliance

Best Security & Compliance Reports

• Centralized reporting and event correction engine for historical forensics

Reduces Total Cost of Ownership (TCO) of Security Management

• Automatic real-time attack protection with no need for human intervention

Role Based Web Application Security Policy

• Support for web application role based policy to configure different inspection and enforcement policies on different user types, such as administrator, employee and customer

Single Sign-on

• Single sign on support for multiple domains, for both sub-domains and cross-domains

Authentication

• Support for LDAP and RADIUS based authentication

Protect Critical Web Applications with Radware Web Application Firewall:

APSolute Web Security and Compliance with AppWall: Taking Web Application Security to the Next Level Security to the Next Level

Radware’s AppWall is a Web Application Firewall (WAF) appliance that secures Web applications and enables PCI compliance by mitigating web application security threats and vulnerabilities. It prevents data theft and manipulation of sensitive corporate and customer information.

Complete Web Application Protection

• Full coverage out-of-the-box of OWASP top-10 threats ─including injections, cross site scripting (XSS), cross site request forgery (CSRF), broken authentication and session management and security mis-configuration .
• Data leak prevention – identifying and blocking sensitive information transmission such as credit card numbers (CCN) and social security numbers (SSN).
• Zero-day attacks prevention – AppWall positive security profiles limiting the user input only to the level required by the application to properly function, thus blocking also zero day attacks. The positive security profiles are a proven protection against zero-day attacks.
• Protocol validation – AppWall enables HTTP standards compliance to prevent evasion techniques and protocol exploits.
• XML and Web services protection - AppWall offers a rich set of XML and web services security protections, including XML validity check web services method restrictions, XML structure validation to enforce legitimate SOAP messages and XML payloads.
• Web application vulnerabilities – signature protection offer the most accurate detection and blocking technology of web application vulnerability exploits. AppWall negative security profiles offers comprehensive attack protection.

Fully Addresses PCI DSS 2.0 Requirement 6.6

The Payment Card Industry (PCI) issued Data Security Standard (DSS) to prevent financial fraud and information leak from on-line businesses processing credit cards. AppWall fully addresses requirement 6.6 by:

• Protecting credit card numbers leakage and use of web hacking techniques to disclose information processed through web applications
• Out-of-the-box PCI policies
• PCI compliance reports

The Secret Sauce: Adaptive Policy Creation

AppWall offers patent-protected technology to create and maintain security policies for widest security coverage with lowest false positives and lowest operational effort.

Once enabling the auto policy generation module, AppWall analyzes the security related attributes of the protected web application and derives the potential threats in the application. The web application is mapped into application zone, each with its own common potential threats. It then generates granular protection rules per each zone and sets a policy in blocking mode once it has completed an optimization process that minimizes false-positives while maintaining best security coverage.

Integral Part of the Application Delivery Solution

As AppWall is an integral part of Radware’s suite of Application Delivery Controller (ADC) solutions, customers can augment their Web application security protection with: local and global traffic redirection, application acceleration, bandwidth management, and other application-aware services, all while benefitting from a standardized hardware platform. Combining AppWall with Radware ADC solution provides a comprehensive set of availability, acceleration, and security services designed to ensure the fast, reliable, and secure delivery of mission-critical Web applications.

Complete Network and Application Security Solution

Radware’s award winning DefensePro™ is a real-time network attack prevention device that protects your application infrastructure against network & application downtime, application vulnerability exploitation, malware spread, Information theft and other emerging network attacks. DefensePro includes the set of security modules - DoS Protection, Network Behavioral Analysis (NBA), Intrusion Prevention (IPS) and Reputation Engine - to fully protect networks against known and emerging network security threats.

Together with AppWall we offer you the best network and web application security solution for your data center and on-line applications.

Deployments:

AppWall – Faster to Deploy. Easier to Maintain.

AppWall is the only web application firewall that provides complete web application security. It blocks attacks at the perimeter and ensures fast, reliable and secure delivery of mission-critical web applications. It is the best performing application security solution for web security, mitigation and compliance.

Detect. Signal. Block.

Once AppWall detects a web or application based availability attack, its new Defense Signaling feature automatically signals DefensePro which is deployed at the perimeter to mitigate and block attacks in real-time.

This unique Defense Messaging mechanism can be deployed inline as well as out-of-path to assure line speed web based attack mitigation with no additional latency, performance impact or risk.

• Line speed mitigation:
  • 40Gbps
  • 25M DDoS pps
  • 60 micro seconds latency
• Mitigating cyber attacks targeting web applications behind CDNs
• Blocking the following attacks:
  • Advanced http DDoS attacks (Slowloris, Http Dynamic Floods)
  • Brute force attacks on login pages
  • SSL attacks
• Blocking the attack source at the perimeter, securing other applications and services
• Enabling multi-layer detection and mitigation

Out-of-path detection, signaling DefensePro at the perimeter, line speed

All-in-One Application Delivery & Security

When AppWall is deployed as part of Alteon NG, the solution provides a comprehensive set of availability, acceleration, and security services designed to ensure fast, reliable, and secure delivery of mission-critical web applications.

Resources of AppWall instances can be dynamically allocated according to enterprise needs and deliver fault isolation, SLA assurance and high platform density.

The solution supports both out-of-path and inline deployment modes and can be delivered on a variety of platforms that support up to 80Gbps.

ADC deployment with AppWall: Fault isolation, SLA assurance and high platform density

Technical Specifications:

AppWall is available on Radware OnDemand Switch 1XL platform. Scalability is achieved with AppWall clustering feature in conjunction with an Application Delivery Controller (ADC).

AppWall on OnDemand Switch 1 XL

• High performance application delivery appliance
• 4 Gigabit Ethernet ports (copper or fiber)
• Two redundant management ports providing out-of-band highly reliable management interfaces with enhanced security
• LCD panel displaying key statistics
• USB interface for software installation and recovery
• Multiple power supply configurations including dual, redundant AC/DC
  

¹ Actual performance figures may change per network configuration, traffic type, etc.
² Capacity is measured as maximum traffic forwarding when no security profiles are configured.

Documentation:

Download the Radware AppWall Datasheet (PDF).