RE: WAF (Web Application Firewall)

You mean the the WAF SW will not suitable for hug volume traffic

> Date: Fri, 23 Sep 2011 09:21:05 -0500
> From: bhmccie_at_gmail.com
> To: pbhatkoti_at_gmail.com
> CC: davidbass570_at_gmail.com; ccielab_at_groupstudy.com
> Subject: Re: WAF (Web Application Firewall)
>
> I have not. Consider this though if you are new or early in the WAF
> market. Your WAF(s) will be the most taxed products you employ. With the
> exception of SSL offload on your LBs or WAFs, your WAFs are the only
> devices that are doing complete payload inspection. Running in software
> is fine on a small deployment. NOT in a large enterprise. I don't know
> your environment so you will need to make that call.
>
> -Hammer-
>
> "I was a normal American nerd"
> -Jack Herer
>
>
>
> On 09/23/2011 09:11 AM, Radioactive Frog wrote:
> > Anyone ever used Macfee sidewinder?
> > It's close to what Cisco asa can do except a few things.
> >
> > On Sat, Sep 24, 2011 at 12:02 AM, David Bass <davidbass570_at_gmail.com
> > <mailto:davidbass570_at_gmail.com>> wrote:
> >
> > I'll second this. ACE would've been a good product in 2001, and
> > it's not a FW although you could potentially make it do it.
> >
> > Citrix makes an awesome product in the Netscaler line. Palo Alto
> > makes a great product as well, but it's purely firewall.
> >
> > HTH
> >
> >
> >
> > On Sep 23, 2011, at 8:44 AM, -Hammer- <bhmccie_at_gmail.com
> > <mailto:bhmccie_at_gmail.com>> wrote:
> >
> > > OK. Speaking as someone who's done application firewalls for about 8
> > > years (back before anyone had heard of them) I can tell you
> > Cisco is NOT
> > > the WAF solution you want. The Cisco ACE is not a WAF. It's a load
> > > balancer and a crappy one at that. YES. I own several ACEs and
> > we were
> > > an early adopter. That's why we're phasing them out. Cisco ASA
> > is the
> > > moving forward "firewall" universe and it will include this
> > > functionality in different products under the ASA name in the near
> > > future. But I would not recommend jumping in with both feet.
> > >
> > > We used to use Kavado (years ago and now defunct) and moved to
> > Teros.
> > > Teros was acquired by Citrix. Citrix has a network appliance group
> > > called ANG (Application Networking Group) that they sell their load
> > > balancers and application firewalls thru. They are called the
> > NetScaler
> > > line. They are top end appliances for enterprise environments. Great
> > > stuff. I highly recommend them.
> > >
> > > F5 has a great solution as well. We have used it in the past but
> > decided
> > > to stick with NetScaler.
> > >
> > > There are also some software products out there that (depending
> > on your
> > > volume and design) may be suitable.
> > >
> > > Let me know if you have any additional questions regarding this.
> > >
> > > -Hammer-
> > >
> > > "I was a normal American nerd"
> > > -Jack Herer
> > >
> > >
> > >
> > > On 09/23/2011 07:34 AM, Iam Here wrote:
> > >> You mean that the SW version will not be suitable
> > >>
> > >>
> > >>> Date: Fri, 23 Sep 2011 17:12:47 +1000
> > >>> Subject: Re: WAF (Web Application Firewall)
> > >>> From: pbhatkoti_at_gmail.com <mailto:pbhatkoti_at_gmail.com>
> > >>> To: manserkhan_at_gmail.com <mailto:manserkhan_at_gmail.com>
> > >>> CC: go_soon2010_at_hotmail.com <mailto:go_soon2010_at_hotmail.com>;
> > muhammad.nasim_at_gmail.com <mailto:muhammad.nasim_at_gmail.com>;
> > ccielab_at_groupstudy.com <mailto:ccielab_at_groupstudy.com>
> > >>>
> > >>> Unfortunately F5 VE sux!
> > >>> Try loading 700+ Mb traffic on F5 ASM - it will die ..
> > >>>
> > >>> On Fri, Sep 23, 2011 at 4:05 PM, Anser
> > Gmail<manserkhan_at_gmail.com <mailto:manserkhan_at_gmail.com>> wrote:
> > >>>
> > >>>
> > >>>> Check 'Astaro' Web Applulication Firewall. Its a dedicated HW FW
> > >>>>
> > >>>> Sent from my iPhone
> > >>>>
> > >>>> On Sep 23, 2011, at 2:02 AM, Iam Here<go_soon2010_at_hotmail.com
> > <mailto:go_soon2010_at_hotmail.com>> wrote:
> > >>>>
> > >>>>
> > >>>>> Are there any Software products ?
> > >>>>>
> > >>>>>
> > >>>>>> From: muhammad.nasim_at_gmail.com
> > <mailto:muhammad.nasim_at_gmail.com>
> > >>>>>> Date: Fri, 23 Sep 2011 01:39:21 +0300
> > >>>>>> Subject: Re: WAF (Web Application Firewall)
> > >>>>>> To: go_soon2010_at_hotmail.com <mailto:go_soon2010_at_hotmail.com>
> > >>>>>> CC: ccielab_at_groupstudy.com <mailto:ccielab_at_groupstudy.com>
> > >>>>>>
> > >>>>>> hi , checkout cisco waf solution.
> > >>>>>>
> > >>>>>>
> > >>>>>>
> > >>>>>> On Fri, Sep 23, 2011 at 1:24 AM, Iam
> > Here<go_soon2010_at_hotmail.com <mailto:go_soon2010_at_hotmail.com>>
> > >>>>>>
> > >>>> wrote:
> > >>>>
> > >>>>>>
> > >>>>>>> I have an Web Application Server and I'd like to protect
> > it with Web
> > >>>>>>> Application Firewall product (HW or SW)
> > >>>>>>> any recommendations will be appreciated
> > >>>>>>>
> > >>>>>>>
> > >>>>>>> Blogs and organic groups at http://www.ccie.net
> > >>>>>>>
> > >>>>>>>
> > _______________________________________________________________________
> > >>>>>>> Subscription information may be found at:
> > >>>>>>> http://www.groupstudy.com/list/CCIELab.html
> > >>>>>>>
> > >>>>>>>
> > >>>>>>>
> > >>>>>>>
> > >>>>>>>
> > >>>>>>>
> > >>>>>>>
> > >>>>>>>
> > >>>>>>>
> > >>>>>>
> > >>>>>> --
> > >>>>>> Muhammad Nasim
> > >>>>>>
> > >>>>>>
> > >>>>>> Blogs and organic groups at http://www.ccie.net
> > >>>>>>
> > >>>>>>
> > _______________________________________________________________________
> > >>>>>> Subscription information may be found at:
> > >>>>>> http://www.groupstudy.com/list/CCIELab.html
> > >>>>>>
> > >>>>>
> > >>>>> Blogs and organic groups at http://www.ccie.net
> > >>>>>
> > >>>>>
> > _______________________________________________________________________
> > >>>>> Subscription information may be found at:
> > >>>>> http://www.groupstudy.com/list/CCIELab.html
> > >>>>>
> > >>>>
> > >>>> Blogs and organic groups at http://www.ccie.net
> > >>>>
> > >>>>
> > _______________________________________________________________________
> > >>>> Subscription information may be found at:
> > >>>> http://www.groupstudy.com/list/CCIELab.html
> > >>>>
> > >>>
> > >>> Blogs and organic groups at http://www.ccie.net
> > >>>
> > >>>
> > _______________________________________________________________________
> > >>> Subscription information may be found at:
> > >>> http://www.groupstudy.com/list/CCIELab.html
> > >>>
> > >>
> > >> Blogs and organic groups at http://www.ccie.net
> > >>
> > >>
> > _______________________________________________________________________
> > >> Subscription information may be found at:
> > >> http://www.groupstudy.com/list/CCIELab.html
> > >
> > >
> > > Blogs and organic groups at http://www.ccie.net
> > >
> > >
> > _______________________________________________________________________
> > > Subscription information may be found at:
> > > http://www.groupstudy.com/list/CCIELab.html
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Sat Sep 24 2011 - 00:59:56 ART