Suggestions on a Web App firewall?

[raffi at flossyourmind.com (Raffi Jamgotchian)]

Mick,

check out Fortinet's Fortiweb;
http://www.fortinet.com/products/fortiweb/1000B.html

They also have a separate product for Database security:
http://www.fortinet.com/products/fortidb/

I think they would be considered enterprise-y

On Feb 10, 2010, at 4:50 PM, Michael Douglas wrote:

> It's been over three years since I've been hands on any firewalls that
> have web app capabilities... so I'm going to open this up to folks
> like you.  Yes you.  You seem very nice and trust-able.
>
> Do you have any suggestions on web application firewalls?
> Specifically, I'm looking for something appliance based and (sorry to
> use this term) enterprise-y (specifically, as in nice centralized
> management for multiple nodes, etc).
>
> What are some products I should review?  If you provide a name, please
> let me know what you like about it.  Are there ones I should avoid?
>
>
>
> Thanks for your help!
> - Mick
>
> PS: please don't mention host based software options like mod_security
> (for apache) or eEye's whatchamacallit for IIS.  We have host based
> solutions already.  We want/need inline network devices in this
> instance...  I don't care what GDead (Bruce from Shmoo Group) said...
> I still think security-in-depth is a worthy goal.   ;-)
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com