Any Firewall Appliance to Front End Web and Mail Server?

Any Firewall Appliance to Front End Web and Mail Server?
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Networking Firewalls    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Any Firewall Appliance to Front End Web and Mail Server? Will 03-19-2008
Posted by Will on March 21, 2008, 6:12 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> usc@noemail.nospam says...
>> > usc@noemail.nospam says...
>> >> The attack is usually different. The user inside the network using
>> >> a
>> >> browser goes to a page with a trojan and it is embedded as an
>> >> Active/X,
>> >> for
>> >> example. So a defense against that would be to inspect the active/x
>> >> binary
>> >> during download for metainformation as well as checksum that might
>> >> identify
>> >> it and then block it.
>> >
>> > Actually, blocking ActiveX completely is the best method. There is no
>> > reason to allow ActiveX except from known good sites that require it
>> > for
>> > your business.
>>
>> Agreed and that is for the web browsers behind our firewall.
>>
>> I'm trying to protect a web server, so blocking Active/X at the browser
>> isn't addressing my need.
>>
>> What I am looking for is a web application firewall that is commoditized
>> as
>> an appliance for low-end servers, similar to what Fortinet has done with
>> their 50B and 60B firewall appliances for small businesses.
>
> If a web server is all you want to protect, then a simple NAT router
> will do all you need if you properly secure the server and web services.

How is an NAT box going to inspect a URL request and block SQL injections or
any other known vulnerability of a web server.

Of course you configure the server as well, but that's not mutually
exclusive with a web application firewall, and the two complement each
other.

--
Will



Posted by Todd H. on March 20, 2008, 10:32 am
If you were  Registered and logged in, you could reply and use other advanced thread options

> To protect internal users and networks I really like the approach used in
> the Fortinet Fortigate firewall appliances, which integrate a lot of
> anti-virus, intrusion protection, and other higher level abstractions
> directly into the firewall. The Fortigate is just a standard firewall,
> however, when it comes to protecting internal servers against hackers.
> For example, you can design a set of firewall rules that might limit
> incoming connections to the web server to port 80, but there is no protocol
> level inspection of incoming HTTP requests, to detect or block specific
> kinds of probes or attacks against the web server.
>
> Does any vendor make a firewall appliance that is specifically focused on
> protecting internal web servers and blocking against specific kinds of
> attacks? Any references to such appliances are appreciated.

Hi Will,

Yes. What's yer budget? What sort of speed do you need?

Unified Threat Management boxes may be one solution.

There was a recently a roundup of these devices in SC Magazine.
http://www.scmagazineus.com/UTM-2008/GroupTest/121/

Among those, I have some experience with the ISS (now part of IBM)
Proventia M that runs about $1400 plus support. What I like about
those is that the IPS/IDS in them doesn't block whole IP
addresses--they just swallow the subset of the traffic that represents
the detected threat when in blocking mode. Many other vendors seem to
lock out IP's when threats are triggered which makes them rather
vulnerable to DOS with spoofed traffic.

--
Todd H.
http://www.toddh.net/

Posted by Robby Cauwerts on March 20, 2008, 4:16 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

> Does any vendor make a firewall appliance that is specifically focused on
> protecting internal web servers and blocking against specific kinds of
> attacks? =A0 Any references to such appliances are appreciated.
>
> --
> Will

Check Point with a Web Intelligence license will do some "basic"
checks.

If web services are part of you core business:
(in no particular order)
www.denyall.com
F5 Big-IP with ASM
Reactivity
=2E..
Patching you systems, writing secure code and an audit from time to
time might also help.

Similar ThreadsPosted
Inbound Mail Server Connect and Reject by Firewall December 8, 2007, 3:11 am
Forwarding more then one mail server and two different domains March 31, 2006, 11:23 am
Forwarding more then one mail server and two different domains March 31, 2006, 11:23 am
Mail server inside the network...Safe? September 6, 2007, 11:10 am
How to access cable modem "in front of" firewall July 20, 2007, 3:07 pm
GUI Front End for netfilter/iptables July 6, 2005, 6:10 pm
E-mail problem with Norton Personal Firewall October 28, 2005, 4:55 pm
sonic firewall blocking scan to mail from photocopier July 27, 2006, 5:50 pm
Anyone Have Mail Alerts Working in Firewall-1 Windows Version? September 1, 2006, 1:37 am
Which Firewall appliance? October 8, 2006, 10:05 am

The site map in XML format XML site map

Contact Us | Privacy Policy