::: SECUI.COM :::

Home > 製品 > WAF

クロスサイトスクリプティングなど、ウェブ上で発生される様々な情報侵害の行為をリアルタイムで検知・遮断することはもちろんで、同時にウェブアプリケーションのレスポンス速度を向上し、ネットワーク・トラフィックを減少させ、業務における高い效率性を提供するウェブアプリケーション・ファイアウォールです。

[Line UP]

Target	Product	Performance	Chassis
Large Scale Enterprise Network	SECUI NXG 4000W	4Gbps
Medium, Small Scale Network	SECUI NXG 2000W	2Gbps

* Functions *

Item	Function	Support
HTTP Protocol Inspection	HTTP Standard Protocol Inspection	Yes
	HTTP Method Inspection	* Method Inspection
	HTTP Version Inspection	* HTTP/1.0 or 1.1
	HTTP Status Code Inspection	* HTTP Status Code Inspection
	HTTP Header Revision Function
	HTTP Header field Value Inspection	* Diverse inspection routine support (wildcard, regular expression type support) * Inspection list
	HTTP Header Overflow Inspection	* Overflow inspection of all headers
	HTTP URL Inspection	* URL overflow inspection * URL normalization * Inspection of requested URL extensions * Blocking connection of specific IP to specific URL
	Cookie Inspection	* Cookie modulation inspection * Encrypted cookie inspection
	HTTPS	Yes
HTTP Req Body Inspection	QUERY Inspection	* Query name length inspection * Query name content inspection * Query value length inspection * Query value content inspection (forbidden words) * Query count inspection
Dynamic Profile (Self-Study Function)	HTTP Request Dynamic Analysis	* Cookie field dynamic analysis * HTTP method * HTTP header field * MIME type
	Response HTML Analysis	* HIDDEN field inspection * SSL link change
	Saving and Searching Dynamic Analysis Results	Yes
	Special Format String Replacement and Deletion	Yes
	Server Study Function	* “Redirection study function” added
Web Application Cloaking	Cloaking HTTP Resp Header Field	* HTTP resp header field delete * HTTP resp header field modulation
Web Application Cloaking	Cloaking HTTP Resp Status Code	* Returning user –defined modulation page
Attack Code Injection Inspection	Targets of Inspection Inspection	* Each assigned path * Each assigned parameter name * GET/POST transfer value inspection * HTTP header field inspection (including cookie field)
	SQL Injection Inspection	Yes
	XSS Injection Inspection	Yes
	OS Command Injection Inspection	Yes
	SSL Injection Inspection	Yes
	Directory Traversal Inspection	Yes
	User-defined Injection Inspection – Regular expression-type Support	Yes
Error Processing	Monitoring for policy violation	Yes
	Blocking for policy violation	Yes
	Diverse Error Processing (applied when blocking occurs)	* User-defined error page return * Redirection * Status code return
Error Handling Function	By-pass Function	Yes
Error Handling Function	Fail-over Function	Yes
Log and Reporting Function	Automatic analysis and categorization of invasions	Yes
	Real-time alert	Yes
	Web attack log	Yes
	System log	Yes
Protecting Personal Information	Protecting resident registration number	Yes
	Protecting credit card number	Yes
	Support of formats including doc, pdf, hwp, xls, and ppt	Yes

* Performance *

Target	Product	Performance
Large Scale Enterprise Network	SECUI NXG 4000W	4Gbps
Medium, Small Scale Network	SECUI NXG 2000W	2Gbps