Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Imperva tailors Web app firewall for midsize businesses

SecureSphere Standard Edition has simple interface and comes with engineering help
By Tim Greene , Network World , 10/06/2008
  • Share/Email
  • Comment
  • Print

Imperva is introducing a scaled-down version of its Web application firewall designed for quick installation in midsize businesses.

SecureSphere Standard Edition is a trimmed-back iteration of its Secure Sphere Enterprise Edition that has a simplified graphical user interface and revised documentation. It is designed for businesses that don’t have full-time IT security staff and few IT staff in general, the company says.

The platform’s support package comes with two hours of Webex consultation with Imperva engineers to help configure the gear, which is the amount of time the company says most small businesses need to get it up and running.

Imperva says that because the device is not proxy based, it can be installed in front of Web servers without requiring any network configuration changes, again playing to short-staffed IT departments in businesses with 250 to 1,000 employees. The product’s Dynamic Profiling automatically monitors Web application behavior for two to five days and recommends security policies to protect it, requiring less staff expertise in application security.

One user of Secure Sphere SE says it meets the Payment Card Industry standard requirement that a Web application firewall be placed in front of Web servers containing customer information. National Bank Card Services in Minneapolis installed one of the devices in front of its lone Web server from which its customers download daily sales data, says Allan Kintigh, software engineer for the firm.

The box meets PCI requirements, but he says the company didn’t really need it to protect data because sensitive personal data such as credit card numbers are not stored on the Web server. “We wanted zero liability, and the only way we could do that is not to store the data there,” he says.

Still, Kintigh says the PCI requirement for the device is giving him an education about how Web servers can be attacked and probed based on the reports SecureSphere creates. He says he checked out competing products from Citrix, F5 Networks and Breach Security, and after testing one from Citrix, he found that the Imperva interface was simpler to deal with.

SecureSphere SE pricing starts at $15,000.

  • Share/Email
  • Comment
  • Print
Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed