ADCs are load balancers on steroids (SSL offloading, enhanced compression / bandwidth utilization, WAF, reverse proxy, DDoS protections), while dedicated load balancers perform pure round robin transaction sharing.
For cloud-based apps, elastic load balancers (ELB) maybe consumed as a dedicated service (along w/ separate services: WAF, reverse proxy), while on premise Web apps should be leveraging an ADC for pure consistency & economy of scale reasons.
Showing posts with label WAF. Show all posts
Showing posts with label WAF. Show all posts
Tuesday, January 17, 2017
Tuesday, February 23, 2016
AppSec, WAFs & ESAPI
While a client waits to deploy CDN, WAF, & DDoS services to their edge, we have suggested using OWASP's ESAPI as a stopgap.
She is old and imperfect, yet ESAPI still has a use.
https://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API
She is old and imperfect, yet ESAPI still has a use.
https://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API
Thursday, January 28, 2016
WAF/MDM/2FA/CAPTCHA/DLP/SSL/... Bypass
It is extremely important to test out the effectiveness of your compensating controls.
Many organizations have rested on their laurels after implementing one of the tools above only to experience a data breach.
A cynic might say that this is the difference between compliance and information security.
Many organizations have rested on their laurels after implementing one of the tools above only to experience a data breach.
A cynic might say that this is the difference between compliance and information security.
Subscribe to:
Posts (Atom)