Breach Security WebDefend
Strengths: Features on top of features.
Weaknesses: Many features have similar names and can be confusing for the novice.
Verdict: Offers many different levels of protection. Despite its high price, WebDefend is a worthy product.
SummaryWebDefend is an application firewall that protects the organization in many ways. It takes a different approach to SSL-based traffic than most other devices. SSL (Secure Sockets Layer) is sometimes referred to as the UFBP (Universal Firewall Access Port). WebDefend passes an original copy of the encrypted packet to the end web server, and also stores a copy locally, which is then decrypted and analyzed for attacks. Either an alert can then be generated or the traffic can be blocked.
WebDefend also protects users and servers by using "Dynamic Profiling." This practice builds a profile of each application, which includes web requests, protocol usage, session management and input validation. It protects against many common attacks, but it also will prevent some zero-day attacks.
WebDefend also has more protection mechanisms, which are tied together to create a "collaboration detection engine." This element is made up of a behavior analysis engine, which looks for abnormal usage patterns and signature analysis. This uses intelligent analysis to block known and unknown web application attacks.
The last of the unique features are exit control and application defect detection. Exit control monitors for patterns, such as a credit card or Social Security number, and the application defect engine protects the organization from programming errors.
Documentation is well done. Critical information can be found in the accompanying printed materials, on the installation, and also through the website.
Support is offered through phone, email and website. The hardware warranty covers the first year. Breach Security offers a variety of support options. In addition to the one-year hardware warranty, the standard support package includes email, phone and fax assistance during local business hours, plus all product maintenance updates. The premium support package adds 24/7/365 email, phone and fax support; next-day replacement service; and all product maintenance updates to the standard one-year hardware warranty. Both the standard and premium support packages are available at an additional cost.
WebDefend is priced at $45,995, making it an expensive offering for the product class.