generic term for set of software, web server extensions or hardware designed to filter WWW traffic at the application level in TCP network model.

learn more… | top users | synonyms (1)

0
votes
0answers
12 views

applicure dotdefender ISAPI filter causing pdf issue

I have recently migrated a web server form Server 2008 R2 to Server 2012 R2 The dotdefender application firewall works fine except for one issue. On large PDF ~15MB or more it take anywhere from 1 - ...
-4
votes
1answer
70 views

Restrict Access from certain machines to my Web Application in LAN [closed]

I am trying to deploy a Local Network web application, which should not necessitate a client login. The requirement is to block certain machines, (not users, just a few computers, the application ...
1
vote
1answer
158 views

What is the difference between a SPI Firewall and an Application Layer Firewall?

What is the difference between a SPI Firewall and an Application Layer Firewall? In what circumstances would I prefer one over the other?
0
votes
0answers
99 views

External Web Application Firewall infront of IIS

We have a public facing IIS webserver hosting an ASP website which is not very secure, to say the least. I have found out several serious flaws in the last few months and would like to do something ...
1
vote
2answers
141 views

What tech. is required to build a firewall that dynamically opens ports after users authenticate through a web form against Active Directory?

I need to expose via Internet an insecure internal web app that can't be modified to be made intrinsically more secure. The most common solution for this problem is to access the web app through VPN. ...
0
votes
1answer
77 views

Spoof IPP response in firewall?

How I do to spoof a IPP "Unauthorized" response? Have read the IPP specification documents but cannot find exactly how a IPP response should look like. Any examples? Basically, I have a IPP printer ...
3
votes
2answers
2k views

Securing Apache Solr in production

I am setting up Apache Solr 4.1 that will be used to index data for a web app. Only the web app should have access to the Solr. Users and other clients will not talk directly to Solr. What are some ...
2
votes
1answer
134 views

Is there any application/firewall to detect content scrapers? [closed]

We are noticing that a significant amount of web traffic is from content scrapers (determined due to their crawling pattern). They are useless visitors to us but consume a lot of our resources ...
0
votes
1answer
153 views

HTTP-CLASS-Redirecting traffic-F5

Can we redirect https traffic to a particular real server using http-class in F5? i.e whether http-class works with both http and https traffic.?
0
votes
1answer
358 views

F5 - URL redirect without irule

I have a main domain - url which is getting load-balanced through VIP between 2 Real Servers in F5 and I want a sub-domain of the main url not to be loadbalanced but to be pointed to a single real ...
2
votes
1answer
234 views

Examples where an AWS Security Group is not sufficient as a firewall?

Currently I am using only an AWS security group for one of my EC2 instances but have given some thought to adding a firewall to that stack as well. I'd be looking at using either iptables, or ...
0
votes
1answer
300 views

SonicWALL SRA blocks load test as a DoS attack

I am evaluating the Web Application Firewall (WAF) service on a SonicWALL SRA virtual appliance. When I try to load test the protected website, SonicWALL blocks my requests with this error: "Reset ...
2
votes
0answers
245 views

Barracuda 660 WAF SNMP - Barracuda-BWS::totalAttacks

I've come across a little problem with retrieving stats via SNMP from a Barracuda Web Application Firewall 660. According to both the documentation (page 211), and the MIB defination, doing an SNMP ...
-1
votes
1answer
794 views

Apache2 mod_security simple default deny rules for specific directory

How to configure the simplest useful default-deny rule set for mod_security? I want to configure mod_security to allow only very specific queries to single directory: In short: I use Apache as a ...
1
vote
1answer
415 views

What web application firewall do you use? What should I use?

What web application firewall do you use? I'm primarily interested in something I can deploy on the perimeter that can protect multiple Apache and IIS servers, but I'd like to hear all answers. Tell ...
2
votes
1answer
2k views

node-waf nodejs failing

When trying to compile Gilt Hummingbird for NodeJS, I get this error, as node-waf is missing. rm -rf build .lock-wscript bson.node node-waf configure build make[1]: node-waf: Command not found ...
1
vote
0answers
567 views

ActiveSync on iOS 4.2 no longer supports cookies?

We have a in-house developed WAF protecting our OWA (activesync) webserver, and part of its function requires long-lived Cookies on the "browsers". We're trying to get it to support iPhones via the ...
2
votes
1answer
199 views

What is the funniest firewall rule set? [closed]

What is the finniest firewall rule set that you know of? It doesn't necessarily have to stop attacks, you could just be having fun with the attacker. Any type of firewall will do, Packet Filter ...