haltdos - Web Application Firewall

Transcription

1 haltdos - DATASHEET Delivering best-in-class protection for modern enterprise Protect your website against OWASP top-10 & Zero-day vulnerabilities, DDoS attacks, and more...

2 Complete Attack Protection haltdos s (WAF) uses state of the art anomaly detection techniques to protect your website from common and zero-day web exploits, SQL injections, cross-site scripting (XSS), CSRF, OWASP top - 10vulnerabilities and application layer attacks that affect application availability or compromise the security of your website. haltdos WAF is fully-integrated with DDoS protection and Load balancing features a central management for its users. haltdos customers also get an unified monitoring when an attack occurs, including the type and size of the attack, IP origin, Attack vectors, mitigation process & access logs. Key Highlights > High Performance Low latency and high mitigation capacity for very high volume and sophisticated attacks and maintains excellent user response time even when under attack. > Multi-Layered Solution HaltDos combines network behavioral analysis (NBA), heuristic and reputation techniques to detect bot traffic from legitimate user traffic. > Unified Monitoring Per-user customization of real-time dashboards and historical records of attack trends and network patterns. > Maintain Business Operation Full protection against emerging network threats and maintain network performance even when under high volume network attacks. ZERO DAY Easy Installation You can Install haltdos WAF solution for your website with a quick installation process. It's cloud-based service that doesn't require any hardware or software to install and manage. It is also integrated with the complete haltdos solution which adds in-built DDoS protection and Load Balancing capabilities to secure your website from the more advanced attack types. 2

3 Technical Aspects DDOS PROTECTION Protection against the largest volumetric attacks Full application-layer visibility Protection of non-web infrastructure services (FTP, SMTP, etc.) Detection & mitigation of application layer attacks Mitigation of application layer attacks with minimum false positives Instant customization & propogation of security rules Real-time visibility and control Protection of origin IP addresses against DDoS attacks External DDoS attack monitoring for network infra. Full control over technology upgrades & new features without reliance on third party or open source software WEBSITE SECURITY Access Control (white/blacklisting) IP reputation based monitoring system Customization of security rules API Integration Classification algorithms to mitigate advanced bots LOAD BALANCING haltdos protects your website from all types of attacks TCP SYN Flood TCP SYN+ACK Flood TCP ACK + PSH Flood TCP Fragment HTTP Flood Brute Force Connection Flood Slowloris Spoofing Zero-day attacks Low and Slow attacks Website Scrapping Protection SQLi LFI/RFI RCE attacks XSS Injection CSRF more... Global server load balancing Application layer local server load balancing Application layer site failover Real-time website health monitoring Layer 7 traffic routing 3

4 Specifications FEATURES OWASP top 10 vulnerabilities protection SSL/TLS based attack protection Periodic IP reputation, TOR IP updates Blacklisting & Whitelisting Protection against SQL Injection, XSS, Cookie poisoning, LFI, RFI, etc. Periodic website health checks REGEX based rule matching protection Configurable REGEX expressions Website analytics based on host and URL combination Deep Packet inspection and RFC verification Virtual Patching API Integration Inbuilt DDoS detection and mitigation capabilities Log management with detailed logging Network and Application Layer protection Automated attack defense & bot detection Protection against Zero-day attacks Low latency and High throughput Supports custom signature-based attack definitions Supports spoofed TCP SYN flood prevention Layer 7 Load Balancing Low & Slow attack protection Blocks Invalid packets (including checks for Malformed IP header, incomplete fragment, Bad IP checksum, Duplicate fragment, Bad TCP/UDP checksum, Invalid TCP flags, Invalid ACK number & provide statistics for the packets dropped Signature based & Anomaly based DDoS detection DDoS protection from the Internet as well as from Internal network Rate limiting protection Custom Alarms Daily updates on Geo IP tracking and attack signatures. Attack notifications via GUI and Periodic Reporting (PDF & HTML) 4

5 Office Address: E-52, Sector - 3, Noida, Uttar Pradesh Ph: Fax: info@ To know more visit: About HaltDos haltdos is an AI driven website protection service that secures online businesses against today's cyber threats. It offers comprehensive yet affordable Web Application Firewall, DDoS protection and Load Balancing features in a single platform which allows business to secure their web applications with zero-management. haltdos customers gain full-spectrum visibility of their network with high-end WAF & Anti-DDoS solution which is capable of handling complex cyberattacks with zero false positives. haltdos solutions are in use globally. To Learn more visit at www. Copyright 2017 Halt Dos.com Pvt. Ltd. All rights reserved. HaltDos disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. HaltDos reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable. 5