According to Trustwave's "State of Security" report, 96% of the web applications scanned by the company had one or more serious vulnerabilities. The well-known WAF tool ModSecurity has been optimized and integrated with KEMP's kernel-based ADC engine, directly enhancing the security features already built into LoadMaster load balancers. The goal is to create a layered defense for web applications, thereby enabling secure, productive, and compliant web application resource utilization.
KEMP has collaborated with the engineering team at Trustwave, the keepers of ModSecurity, to expand the core technology of the Loadmaster ADCs beyond simply providing a flexible Layer 7 application deployment tool; it has also become a dynamic WAF. KEMP's Layer 7 WAF platform is built on a rules engine that delivers real-time coverage of all published application threats, including the OWASP Top Ten, as well as mission-critical protection. Crucially, it allows users to reuse their existing ModSecurity-based rules across a centralized KEMP ADC appliance.
With the integration of WAF into KEMP's ADCs, the company strengthens its existing security features available on its LoadMaster platforms, which include: edge security gateway functionality to protect published workflows, including reverse proxy, SSO, SMTP domain pre-authentication and filtering, two-factor authentication, IPS, and SSL bridging to secure traffic flows. KEMP's threat protection also includes attack categories such as IP reputation, botnet detection, web-based malware detection, backdoor/webshell detection, HTTP denial-of-service (DoS) attack detection, and antivirus scanning of attachments.
