topic Thanks Marvin, in Network Security

Product Advice - HTTP Protection

Peter_sgc_2 — Tue, 12 Mar 2019 09:41:27 GMT

Hello,

I need a firewall that will protect web applications from attacks. We have no control over the source code.

What do people recommend?

trying to prevent things like .. SQL Injections, Buffer Overflow and PHP and ASP vulnerabilities.

Any of the Cisco products

Marvin Rhoads — Wed, 12 Jul 2017 12:32:47 GMT

Any of the Cisco products with Firepower can do this - ASA with FirePOWER service module, Firepower appliance running FTD image, or Firepower NGIPS appliance.

Which product depends on if you want to replace your existing firewall and what throughput you require.

Hello Marvin,

Peter_sgc_2 — Wed, 12 Jul 2017 12:42:35 GMT

Hello Marvin,

Thanks for the Advice, I have not heard of FirePOWER.

I stopped working with Firewalls when PIX became ASA so I am not familiar with what they can do now.

Thanks, I will take a look.

You're welcome.

Marvin Rhoads — Wed, 12 Jul 2017 12:48:37 GMT

You're welcome.

Firepower is the technology from Cisco's acquisition of Sourcefire in Fall 2013. Sourcefire was the series of commercial products that were built on and extend and enhance the open source Snort IPS.

Cisco has integrated it across most of their security portfolio. Add to it things like endpoint protection with AMP (Advanced Malware Protection) for Endpoints and Cisco Umbrella (former OpenDNS product) and you have a very complete and effective security portfolio.

Please mark your question as answered if it has been.

Thanks Marvin,

Peter_sgc_2 — Wed, 12 Jul 2017 12:57:20 GMT

Thanks Marvin,

Would you know how I could get a Product on Demo to make sure it would do what I need?

If you contact your preferred

Marvin Rhoads — Wed, 12 Jul 2017 15:09:34 GMT

If you contact your preferred Cisco reseller there are various demos they should be able to arrange. They range from instant demo (WebEx walkthrough) to dCloud-based to on-site deployment of an ASA with FirePOWER services that can use and analyze your actual traffic. That last one is known as "proof of value" program.

If you don't have a regular relationship with a Cisco partner, I recommend you use the partner locator tool and do an advanced search for one who is a Master Security partner.

https://locatr.cloudapps.cisco.com/WWChannels/LOCATR/openBasicSearch.do