Joshua Turnbull
on
•
5 mins
Data protection is focused on making sure that data remains available and immutable — even after a cybersecurity attack, or system failure. This prevents data loss and facilitates data recovery.
Data protection is focused on making sure that data remains available and immutable — even after a cybersecurity attack, or system failure. This prevents data loss and facilitates data recovery.
For Enterprise 8.9, Loadbalancer.org added a new SSL Terminator for HAProxy, allowing for mutual Transport Layer Security (mTLS) configurations.
If you're thinking about giving mTLS a go, why not try it for yourself by following the steps below.
Enhanced visibility for more efficient and secure ADC management.
There seems to be a lot of confusion about the role of a Web Application Firewall (WAF) in application security, and what types of threat a WAF can help mitigate in your deployment.
TLS encryption (formerly known as SSL encryption) is used to improve the safety of data exchanged over a network. But where should it sit in your network architecture?
Some network engineers think that Web Application Firewalls (WAFs) are so complicated, they've been known to run away and hide for days when they've encountered one.
The talk of the town at InfoSec 2023 was the evolving cyber security battleground, and the practical steps organizations might take in order to mitigate some of these threats.
The ModSecurity web application firewall (WAF) engine is set to go end-of-life (EOL) on 1 July 2024.
You need a clear, comprehensive view of your entire load balancing estate to maintain control and security.
It can sometimes be useful to make load balancing decisions based on the time and date. This allows you to conditionally refuse or redirect connections based on the time they're received.
There are two schools of thought on this: ‘yes, it should’ and ‘no, it shouldn't’. Let's look at the arguments both for and against.
Here's what we learned from crAPI about API security, and how a Web Application Firewall (WAF) can help you take things one step further.
Getting on board with zero trust is the easy part. Actually applying these principles to your architecture is less black and white.
I had the privilege of speaking in Dublin at this year's OWASP Core Rule Set Community Summit before then attending OWASP Global AppSec immediately afterwards.
We'd all rather prevent a disaster than have to live with the consequences of one.
How can we safely deal with very large HTTP requests when working with a WAF?
Rate limiting in HAProxy and the WAF, to prevent DOS-style attacks on customer servers.
If exploited, the F5 CVE-2022-1388 vulnerability can lead to a full system takeover.
Detail on Spring Framework vulnerabilities CVE-2022-22963 and CVE-2022-22965.
The vulnerability affects OpenSSL’s BN_mod_sqrt() function which can get stuck in an infinite loop.
Details of the PwnKit vulnerability.
The implications of the recent ModSecurity vulnerability on open-source Web Application Firewalls.
This powerful piece of hardware can aggregate multiple web filters together to meet huge throughput demands.
Here we outline our new, simplified WAF offering, for easier configuration and superior web application security, using the core rule set v3.