It's been over three years since I've been hands on any firewalls that have web app capabilities... so I'm going to open this up to folks like you. Yes you. You seem very nice and trust-able.
Do you have any suggestions on web application firewalls? Specifically, I'm looking for something appliance based and (sorry to use this term) enterprise-y (specifically, as in nice centralized management for multiple nodes, etc). What are some products I should review? If you provide a name, please let me know what you like about it. Are there ones I should avoid? Thanks for your help! - Mick PS: please don't mention host based software options like mod_security (for apache) or eEye's whatchamacallit for IIS. We have host based solutions already. We want/need inline network devices in this instance... I don't care what GDead (Bruce from Shmoo Group) said... I still think security-in-depth is a worthy goal. ;-) _______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
