F5 Networks: Introduction to Silverline WAF (web application firewall)
Download as PPTX, PDF7 likes7,569 views
The F5 Silverline Web Application Firewall (WAF) offers a scalable, enterprise-grade cloud-based service for protecting web applications from various layer 7 attacks and ensuring compliance with standards like PCI DSS. It allows organizations to reduce operational costs and enhance security by outsourcing WAF policy management to F5's security experts, providing 24/7 support and proactive threat monitoring. F5's solution is noted for its high security effectiveness with a 99.89% overall rating from NSS Labs.
F5 Networks: Introduction to Silverline WAF (web application firewall)
- 1. Introduction to F5 Silverline Web Application Firewall (WAF) April 2015
- 2. © F5 Networks, Inc 2 Today’s application infrastructure Most applications are Web applications Cloud and SaaS based applications are being deployed more than, and faster than, ever before Users are going Mobile
- 3. © F5 Networks, Inc 3 Customers need a more operationally and cost efficient way to protect web applications across multiple environments without scaling out IT infrastructure and staff. Maintain compliance (PCI DSS) Defend against Layer 7 attacks Secure data and web applications
- 4. © F5 Networks, Inc 4 Recognized as the most scalable WAF on the market Deployed in more datacenters worldwide than any other WAF Now available as an enterprise-grade cloud- based service managed by F5 Security Operations Center (SOC) experts F5’s web application firewall portfolio Built on BIG-IP ASM VIPRION Platform BIG-IP Platform BIG-IP Virtual Edition F5 Silverline WAF
- 5. © F5 Networks, Inc 5 Protect web applications and data from layer 7 attacks, and enable compliance, such as PCI DSS, with the Silverline Web Application Firewall service which is built on BIG-IP Application Security Manager and backed by 24x7x365 support from F5 experts. Silverline Web Application Firewall (WAF) Proven security effectiveness as a convenient cloud-based service Legitimat e User L7 Protection: Geolocation attacks, DDoS, SQL injection, OWASP Top Ten attacks, zero-day threats, AJAX applications, JSON payloads Public Cloud Hosted Web App Private Cloud Hosted Web App VA/DAST Scans Policy can be built from 3rd Party DAST Web Application Firewall Services W AF Cloud Physical Hosted Web App Attackers F5 Silverline WAF
- 6. © F5 Networks, Inc 6 Key benefits Reduce operating costs Protect web apps, anywhere Leverage proven security efficacy Rapidly deploy WAF protections and drive operational and cost efficiencies by outsourcing WAF policy management to F5 security experts. Protect web apps, no matter where they reside with consistent policies across hybrid environments in conjunction with BIG-IP deployments. Protect against critical web attacks with an enterprise- grade service built on BIG-IP ASM which is recommended by NSS Labs with 99.89% overall security effectiveness*. Source: NSS Labs Web Application Firewall Product Analysis. F5 BIG-IP ASM 10200 V11.4.0. https://interact.f5.com/2015ALLF-NSS-Web-App-Firewall--Analysis-for-BIG-IP-ASM_2--- Reg.html
- 7. © F5 Networks, Inc 7 recommends BIG-IP ASM Web Application Firewall when compared with competitors: Overall security effectiveness % 99.89 Minimal false positives % .124 Enterprise-grade protection against layer 7 geolocation attacks, DDoS, SQL injection, OWASP Top Ten attacks, zero-day threats, AJAX applications, and JSON payloads delivered as a convenient cloud- based service. Leverage proven security efficacy An enterprise-grade web application firewall service Source: NSS Labs Web Application Firewall Product Analysis. F5 BIG-IP ASM 10200 V11.4.0. https://interact.f5.com/2015ALLF-NSS-Web-App-Firewall--Analysis-for-BIG-IP-ASM_2--- Reg.html
- 8. © F5 Networks, Inc 8 F5 security experts proactively monitor, and fine-tune policies to protect web applications and data from new and emerging threats. • Expert policy setup • Policy fine-tuning • Proactive alert monitoring • False positives tuning • Detection tuning • Whitelist / Blacklist Set up and monitoring Availability & Support Expert Policy Setup and Management Active Threat Monitoring Reduce operating costs by outsourcing WAF policy management to F5 SOC experts F5 Security Operations Center
- 9. © F5 Networks, Inc 9 Protect web apps, anywhere Easily extend WAF protections to SaaS and cloud apps Protect web apps, no matter where they reside with consistent policies and compliance across hybrid environments, in conjunction with BIG-IP deployments.