Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Forum Systems Integrates XML Gateway, Web Application Firewall On Single Appliance: Page 2 of 2

"Our customers wanted us to put our gateway technology in front of classic HTML because they were getting crushed with traffic identity decisions, such as rich Internet applications (RIAs) using JSON, REST, AJAX, combined HTML and XML traffic," says Mamoon Yunus, president of Crosscheck Networks, Forum's parent company. "Looking at all the requirements interacting from a B2B or portal-to-application perspective, identity becomes a heavier part of securing applications."

In these kinds of complex Web services environments, Yunus says, WAF must support a full range of identity management options for authentication (including SAML, forms, cookies, WS-Tokens and X.509), identity stores and message tokens. Forum Sentry also provides broad protocol support, including HTTP, JMS, FTP, MQ Series, Tibco EMS, HTML, XML, SOAP, MTOM and SwA.

In addition to screening traffic for Web attacks, such as cross-site scripting and SQL injections, Forum Sentry WAF provides anti-virus filtering via RegEx and open-source Clamshell AV. An API allows enterprises to use commercial anti-malware products of their choice. The appliance also provides RegEx-based DLP for basic filtering for sensitive personal data such as credit card numbers and Social Security numbers, or custom searches based on corporate policy.

The platform allows unified policy assignment and a common log set for audit review and analysis. The appliances start at $64,000 or $20,000 for software only.

See more on this topic by subscribing to Network Computing Pro Reports Strategy: Cloud Security (subscription required).