KEMP's LoadMaster™ ADC load balancers provide a range of security capabilities, including edge security, Layer 7 IPS/IDS, DDoS mitigation, application publishing, client authentication, and single sign-on—all standard features across KEMP's full range of ADCs. With the release of the Application Firewall Pack (AFP), KEMP now offers comprehensive Web Application Firewall (WAF) protection.
Application Firewall Pack is based on ModSecurity, the most widely used open-source web application firewall tool, and has been enhanced with a suite of security rules*, research, and threat intelligence from security vendor Trustwave. KEMP's AFP provides real-time threat protection for custom applications and application bundles, data loss prevention (DLT), mitigation of the most common vulnerabilities listed in the OWASP Top Ten, and support for PCI-DSS compliance.
By allowing customers to centralize their existing ModSecurity rules that can be distributed across multiple web application servers, AFP ensures consistency by eliminating the possibility of configuration changes across distributed instances, while also simplifying administration.
Furthermore, by eliminating the responsibility of inspecting incoming requests and outgoing loads for application firewall policy violations from individual application servers – a resource-intensive task – performance is significantly improved, as AFP, together with LoadMaster™, can perform these loads more efficiently.
Because KEMP's ADC LoadMaster™ is typically placed close to deployed application workflow servers, and is inherently required to offload and accelerate the decryption and re-encryption of traffic flows sent over SSL/TLS for intelligent processing, it is perfectly positioned to detect threats at both entry and exit points, even when using secure communication methods.
Today's cybersecurity attacks are more sophisticated than ever, constantly evolving and focused on application vulnerabilities. According to recent statistics published by the National Vulnerability Database, approximately 75% of published vulnerabilities in 2013 targeted applications, with an average of 13 new vulnerabilities discovered every day. Furthermore, according to Trustwave's 2014 Global Security Report, 96% of all applications scanned that year contained one or more serious vulnerabilities. With this in mind, a multi-layered approach is necessary for organizations that take data and application security seriously, and attention must be paid to specific application attack vectors.
“KEMP Technologies continues to execute its vision for application delivery, where security is a core component,” says Eduardo García, Head of the Mediterranean Region at KEMP Technologies. “We are committed to providing unparalleled competitive value in our offerings and to giving our customers the capabilities they need to easily deploy, scale, and secure the applications that are the foundation of their businesses.”.
