F5 Offers Advanced Web Security With BIG-IP v10.1
- 1. BIG-IP V10.1Advanced Web SecurityNovember 2009
- 2. F5 Announcement Highlights New release of BIG-IP delivers advanced Web security solutions to help customers efficiently address threats to Web applicationsWeb scraping attack protection
- 3. Better protection against automated scanners and bots
- 5. Reporting with human readable policies to validate compliance with PCI DSS 1.2
- 6. Secure and Dynamic DNS
- 7. Meets DNSSEC 2009 government compliance
- 9. Integrated into F5’s TMOS architecture
- 10. Announcement date: Nov. 16, 2009Airline Inventory Vulnerable to Web Scraping Ryanair – Stolen data, litigation costs, decreasing revenueWins injunction against Vtours GmBHForbids screen-scraping as commercial use*Ryanair sent cease and desist letters to 300 siteseasyJet warns Expedia: 'Hands off our flights‘
- 11. Protection from Web Scraping Remote usersDublin DatacenterFrankfurt DatacenterLegitimate users see inventory while scrapers are remediatedIT StaffIT StaffAutomated scraperComprehensive reporting on scraping attacksWebDominoNetworkDetect requests and determine web site is being scraped WebDominoNetworkBIG-IP 8900BIG-IP 6900LTM/ASMLTM/ASMSolutionProtects valuable intellectual propertyPrices are controlled and users see airline approved inventoryIntegrated scrape reporting for PCI complianceAvoid litigation drastically reducing legal costs
- 13. Improved PCI Compliance Reporting
- 14. DNS Infrastructure is VulnerableSpoofing and cache poisoning allow hijacking of domainsExample.comwww.example.com?www.example.com?GSLB123.123.123.123012.012.012.012App ServersLDNSCache poisoningProblemNeed to secure DNS infrastructureCache poisoning and spoofing can hijack DNS records
- 15. Need a method for trusted responses
- 16. Need to meet US Government mandate for DNSSEC complianceHacker
- 17. Securing the DNS InfrastructureDynamic and secure DNS with Global Traffic ManagerExample.comwww.example.com?www.example.com?BIG-IP GTM123.123.123.123+ public key123.123.123.123+ public keyApp ServersLDNSClient gets signed, trusted responseSolutionSecure and dynamic DNSEnsure users get trusted DNS queries with signed responses
- 18. Reduce management costs – Simple to implement and maintain
- 19. Meet mandates with DNSSEC compliant solutionHacker
- 20. F5 – A Better Solution For Web SecurityBestWAF with protection from Web Scraping (ASM)Best WAF to assist administrators in understanding security threats (ASM: Attack Expert) Simplified PCI Reporting (ASM)Only GSLB with DNSSEC (GTM)