|
Automated Learning of Applications and User Behavior
A WAF must understand application structure, elements and expected user behaviors in order to accurately detect attacks. Imperva's patented Dynamic Profiling technology automates this process by profiling all application elements and building a baseline or “white list” of acceptable user behavior. It also automatically incorporates valid application changes into the application profile over time.
Research-Driven Security Policies
Developed by Nexusguard’s network security research professionals and Imperva Application Defense Center (ADC), ClearWeb offers the most complete set of application signatures and policies available, as well as DDoS attacks’ information data. The Nexusguard security operations centers have the most up-to-date attacking IP addresses from botnets all over the world and can be used to correlate with data from Imperva’s WAF to provide a total solution for end-to-end web security. The Imperva ADC investigates vulnerabilities reported by Bugtraq, CVE®, Snort®, and other underground forums and performs primary research to deliver the most up-to-date and comprehensive Web attack protection available.
Virtual Patching Through Vulnerability Scanner Integration
For immediate patching of application vulnerabilities, SecureSphere can import assessment results from WhiteHat, IBM, Cenzic, NT OBJECTives, Qualys, and others, before creating custom policies to block known vulnerabilities. Virtual patching reduces the window of exposure and the cost of emergency fixes and test cycles.
Network and Platform Attack Protection
ClearWeb protects web applications and underlying infrastructure by detecting application, web services, server, and network attacks. With over 6,500 signatures that are continuously updated by the Imperva ADC, ClearWeb fortifies all application layers against online threats. HTTP protocol validation prevents protocol exploits and evasion techniques. Flexible, rapidly-updated defenses allows ClearWeb to protect Web 2.0 applications and XML without requiring any application changes.
Granular Correlation Policies Reduce False Positives
ClearWeb distinguishes attacks from unusual, but legitimate, behavior by correlating web requests across security layers and over time. This Correlated Attack Validation examines multiple attributes such as HTTP protocol conformance, profile violations, signatures, special characters, and user reputation, to accurately alert on or block attacks with the lowest rate of false positives in the industry.
Customizable Reports for Compliance and Forensics
ClearWeb will be able to provide a rich statistics report for customers to analyze and understand the daily threats surrounding their online presence. A read-only dashboard login will be provided to all customers to view real-time threats mitigated by ClearWeb. ClearWeb’s monitoring and reporting framework provides instant visibility into security, compliance, and content delivery concerns.
Nexusguard ClearWeb delivers leading web defense technology to enterprises of all sizes and needs in a seemingly simple and yet effective way. Our resilient, low latency core BGP networks route client traffic through globally distributed Nexusguard Centers where our round-the-clock 24/7 Security Operations Centers (SOC) and teams of SecureSphere certified professionals are ever alert and responsive to handle any threats that arise.
Capitalizing on Nexusguard’s core BGP networks, clients can choose from 3 flexible deployment methods best suited to their infrastructure.
GRE Tunnel
Nexusguard Tunnel solution uses GRE to create a tunnel or virtual transport to connect Nexusguard with client infrastructure. BGP is then used inside the tunnel to exchange routing information. Tunnel solution is flexible and transparent, without any modification of client data using Network Address Translation or other methods. Nexusguard Tunnel solution is stable and reduces the risk of client’s real IP being attacked.
Direct Circuits
Dedicated Circuit creates a direct physical connection between Nexusguard and the client for discerning customers who demand the highest level of protection. Although costlier than the other two options, the client enjoys dedicated true out-of-band connection for optimal security and reliability.
Proxy Network
Proxy Solution clients will redirect their traffic to Nexusguard scrubbing centers by changing the DNS on their domain record to the Virtual IPs provided. Nexusguard will work with customers to create and secure a backend channel to prevent further direct attacks.
|
Nexusguard ClearWeb is a cloud-based Web Application Firewall (WAF) solution which offers different-size online content providers leading web defense technology, performance and simplicity by routing client traffic through data centers on multiple continents. Our resilient BGP core networks will ensure that clients get the best routes with low response latency based on the nearest reach to which clients are geo-located. Arranging hosting with our managed hosting partners will also derive additional performance.
