Managed Web Application Firewall Services
Are your web applications secured?

Today's organisations rely on Web applications and Web 2.0 technologies to support key business processes and interact with consumers, partners, employees and other parties. With Content Security' Managed Web Application Firewall service, Web applications such as online shopping carts, login pages, forms and dynamically generated content (user ratings, forums, etc.) are protected against application layer attacks that bypass traditional network and host-based security controls. Content Security supports full lifecycle management, maintenance and monitoring of dedicated WAF appliances as well as monitoring for other appliances that organisations may have.

Unlike network security appliances like firewalls and intrusion detection and prevention systems, WAF appliances perform full inspection of inbound and outbound Web application communications including encrypted (https://) traffic. To accommodate high diversity among commercial and internally-developed applications, WAF technologies profile each application's behaviour and use defined policies to detect and block inappropriate activity.

Recognising the risk that insecure Web applications present, several compliance mandates now require or recommend that organisations secure their Web applications and protect them from cyber attacks. For example, Requirement 6.6 of the Payment Card Industry Data Security Standard v1.2 (PCI DSS v1.2) requires merchants and service providers to address new threats and vulnerabilities for public-facing web applications and ensure they are protected against known attacks. Content Security's Managed WAF service safeguards clients' web applications 24x7, helping to satisfy PCI 6.6 and other regulatory requirements.

Content Security provides "end to end" management of WAF appliances to provide the highest degree of protection and visibility without interrupting legitimate business traffic to and from client applications. With a team of certified Internet security professionals, we provide support for the full WAF lifecycle from initial architecture design and deployment to ongoing tuning and configuration management to real-time security event monitoring and response, removing these burdens on client staff and allowing them to focus on business-driven security initiatives.

Contact us today and let us show you how we can help improve, optimise and maintain the security of your online and Web applications.