Best Web Application Firewall
Best Web Application Firewall

Winner: SonicWALL for SonicWALL Web Application Firewall Service

www.sonicwall.com

While small and medium-sized businesses (SMBs) are increasingly adopting Web 2.0 applications and are being served up SaaS solutions directly from the cloud, they often lack the in-house capabilities to keep up with the rapidly evolving challenges of web security. But increasingly, the Web 2.0 business tools are becoming targets for criminal attacks – such as SQL injection, parameter manipulation, cross-site scripting and denial-of-service (DoS). The SonicWALL Web Application Firewall (WAF) Service offers a complete, affordable, out-of-box compliance solution that allows any company to leverage its existing infrastructure as a licensable, add-on module to the SonicWALL Secure Remote Access platform.

The Web Application Firewall feature is testament to SonicWALL's commitment to ensure key features of its enterprise products are also available to the SOHO (small office/home office) and SMBs space. The WAF is available across SonicWALL's complete SRA line – the world's No. one-selling SSL VPN product line – providing users with easy-to-use, secure and clientless remote access with a broad range of applications and resources on the corporate network. SonicWALL WAF Service applies reverse proxy analysis of Layer 7 traffic against known signatures, denies access upon detecting web application malware and redirects users to an explanatory error page. Acceleration features include content caching, compression and connection multiplexing, and improve the performance of protected websites, significantly reducing transactional costs.

The Web Application Firewall subscription-based service available on the SonicWALL SRA 4200 will arm businesses against modern, web-based threats. Regulatory compliance mandates make web application attacks particularly onerous for financial, health care and application service providers, as well as e-commerce businesses. Using a dynamically updated signature database to detect sophisticated web-based attacks, a company can easily protect web applications from these attacks. A robust dashboard provides an easy-to-use, web-based management interface featuring status page overview of all monitoring and blocking activities, such as signature database status information and threats detected and prevented since boot-up.

Finalists

• Citrix Systems for NetScaler Application Firewall

• F5 Networks for BIG-IP Applicaiton Security Manager

• Imperva for SecureSphere Web Application Firewall

• IBM for IBM Security Network IPS with Web App Protection

• SonicWALL for SonicWALL Web Application Firewall Service