generic term for set of software, web server extensions or hardware designed to filter WWW traffic at the application level in TCP network model.

learn more… | top users | synonyms (1)

1
vote
1answer
101 views

What is the difference between a SPI Firewall and an Application Layer Firewall?

What is the difference between a SPI Firewall and an Application Layer Firewall? In what circumstances would I prefer one over the other?
0
votes
0answers
72 views

External Web Application Firewall infront of IIS

We have a public facing IIS webserver hosting an ASP website which is not very secure, to say the least. I have found out several serious flaws in the last few months and would like to do something ...
0
votes
0answers
137 views

Deny All Allow Video Streaming Site Firewall Proxy

I need to build a hotspot for children to view a video streaming site with random tablet devices that a client is going to provide. The req uested environment should restrict access to only the video ...
1
vote
2answers
134 views

What tech. is required to build a firewall that dynamically opens ports after users authenticate through a web form against Active Directory?

I need to expose via Internet an insecure internal web app that can't be modified to be made intrinsically more secure. The most common solution for this problem is to access the web app through VPN. ...
0
votes
1answer
73 views

Spoof IPP response in firewall?

How I do to spoof a IPP "Unauthorized" response? Have read the IPP specification documents but cannot find exactly how a IPP response should look like. Any examples? Basically, I have a IPP printer ...
2
votes
2answers
2k views

Securing Apache Solr in production

I am setting up Apache Solr 4.1 that will be used to index data for a web app. Only the web app should have access to the Solr. Users and other clients will not talk directly to Solr. What are some ...
2
votes
1answer
126 views

Is there any application/firewall to detect content scrapers? [closed]

We are noticing that a significant amount of web traffic is from content scrapers (determined due to their crawling pattern). They are useless visitors to us but consume a lot of our resources ...
0
votes
1answer
141 views

HTTP-CLASS-Redirecting traffic-F5

Can we redirect https traffic to a particular real server using http-class in F5? i.e whether http-class works with both http and https traffic.?
0
votes
1answer
304 views

F5 - URL redirect without irule

I have a main domain - url which is getting load-balanced through VIP between 2 Real Servers in F5 and I want a sub-domain of the main url not to be loadbalanced but to be pointed to a single real ...
2
votes
1answer
224 views

Examples where an AWS Security Group is not sufficient as a firewall?

Currently I am using only an AWS security group for one of my EC2 instances but have given some thought to adding a firewall to that stack as well. I'd be looking at using either iptables, or ...
0
votes
1answer
281 views

SonicWALL SRA blocks load test as a DoS attack

I am evaluating the Web Application Firewall (WAF) service on a SonicWALL SRA virtual appliance. When I try to load test the protected website, SonicWALL blocks my requests with this error: "Reset ...
2
votes
0answers
217 views

Barracuda 660 WAF SNMP - Barracuda-BWS::totalAttacks

I've come across a little problem with retrieving stats via SNMP from a Barracuda Web Application Firewall 660. According to both the documentation (page 211), and the MIB defination, doing an SNMP ...
-1
votes
1answer
780 views

Apache2 mod_security simple default deny rules for specific directory

How to configure the simplest useful default-deny rule set for mod_security? I want to configure mod_security to allow only very specific queries to single directory: In short: I use Apache as a ...
1
vote
1answer
405 views

What web application firewall do you use? What should I use?

What web application firewall do you use? I'm primarily interested in something I can deploy on the perimeter that can protect multiple Apache and IIS servers, but I'd like to hear all answers. Tell ...
2
votes
1answer
2k views

node-waf nodejs failing

When trying to compile Gilt Hummingbird for NodeJS, I get this error, as node-waf is missing. rm -rf build .lock-wscript bson.node node-waf configure build make[1]: node-waf: Command not found ...
1
vote
0answers
556 views

ActiveSync on iOS 4.2 no longer supports cookies?

We have a in-house developed WAF protecting our OWA (activesync) webserver, and part of its function requires long-lived Cookies on the "browsers". We're trying to get it to support iPhones via the ...
2
votes
1answer
198 views

What is the funniest firewall rule set? [closed]

What is the finniest firewall rule set that you know of? It doesn't necessarily have to stop attacks, you could just be having fun with the attacker. Any type of firewall will do, Packet Filter ...