Forum Systems Announces XWall Version 3.3 with IntelliConfig for Robust Web Services Security in a Matter of Minutes; Unprecedented Ease-of-Use Broadens Adoption of Web Services Firewalls.SALT LAKE CITY -- Forum Systems, a leading provider of trust management and threat protection Web Services security solutions, announced today that it has released version 3.3 of Forum XWall Web Services Security Firewall for cost-effective data-level threat protection. This new release of Forum XWall takes ease-of-use to new levels with step-by-step configuration wizards and over 100 additional usability enhancements. "With over 100 downloads per week, Form XWall is accelerating industry adoption for secure Web services using a closed-circuit security approach without the configuration, set-up and maintenance overhead of a gateway solution. Administrating functions that won't be used is costly and a potential breach to security -- with Forum XWall you get 100% applicable security and zero complexity in a matter of minutes A Matter of Minutes is an episode from the television series The New Twilight Zone. Cast
Forum XWall V3.3 pushes policy management a leap forward with usability features that administrators without deep XML XML in full Extensible Markup Language. Markup language developed to be a simplified and more structural version of SGML. It incorporates features of HTML (e.g., hypertext linking), but is designed to overcome some of HTML's limitations. expertise can relate to. The new IntelliConfig feature offers guided wizards, step-by-step policy configuration and rule-based templates. An administrator can swiftly decide which rules are applicable to their deployment by activating XML intrusion prevention, granular data-level access control as well as management and monitoring. Forum XWall V3.3 offers "full proxy" capability including SSL (Secure Sockets Layer) The leading security protocol on the Internet. Developed by Netscape, SSL is widely used to do two things: to validate the identity of a Web site and to create an encrypted connection for sending credit card and other personal data. and total virtualization An umbrella term for enhancing a computer's ability to do work. Following are the ways virtualization is used. Hardware Virtualization Partitioning the computer's memory into separate and isolated "virtual machines" simulates multiple machines within one physical computer. of WSDL (Web Services Description Language) An XML-based language for defining Web services. Developed by Microsoft and IBM, WSDL describes the protocols and formats used by the service. end-points for security by obscurity An attempt to increase security by keeping elements of a security strategy secret; for example, concealing the specific algorithm implemented in a cryptographic system or keeping a password secret. . Forum XWall V3.3's usability enhancements include more than 100 features that drive down the costs of administration and the time to readjust re·ad·just tr.v. re·ad·just·ed, re·ad·just·ing, re·ad·justs To adjust or arrange again. re the security profile based on the risk. Other features include WSDL API for remote programmatic configuration by third party management infrastructure. About Forum XWall Web Services Firewall Traditional network and application firewalls cannot regulate the flow of structured XML traffic and are unable to control the access to exposed Web service business API's. Network traffic that moves across port 80 and 443 must be managed at the "data-level" to protect against a new breed of XML-related attacks. Forum XWall Web Services Firewall is equipped with data authentication, XML intrusion prevention and interoperability enforcement to actively protect against XML viruses, denial of Web service attacks and unauthorized data access. Forum XWall ensures critical applications are appropriately accessible and continuously available by allowing network administrators to enforce perimeter policies that check the integrity of data and control access to exposed enterprise Web services. Forum XWall ground-breaking features include: --Highest Levels of Threat Protection Enforced at the Edge of the Service Network using XML Intrusion Prevention(TM) (XIP (Execute In Place) The ability to execute a program directly from a memory card. ) with SSL (Secure Sockets Layer (networking, security) Secure Sockets Layer - (SSL) A protocol designed by Netscape Communications Corporation to provide secure communications over the Internet using asymmetric key encryption. ): SSL obfuscates message contents until they arrive at the application. Forum XWall tears apart the SSL session and inspects messages including scanning binary attachments for viruses. XML Intrusion Prevention rules leverage a vulnerability database, well-known attack definitions and anomaly detection capabilities to prevent against a new breed of XML-related threats. --Data-Level Web Services Control through Business APIs Authentication and Access Control: The principle model for advanced access control relies on roles and responsibilities for policy management to reduce the cost of security administration in a large networked environment. Forum role-based access control The identification, authentication and authorization of individuals based on their job titles within an organization. Contrast with mandatory access control and discretionary access control. See least privilege. allows a security administrator to segregate and delegate security permissions according to business best practices. --Interoperability Assurance through WS-I Basic Profile The WS-I Basic Profile (official abbreviation is BP), a specification from the Web Services Interoperability industry consortium (WS-I), provides interoperability guidance for core Web Services specifications such as SOAP, WSDL, and UDDI. and Data Integrity Enforcement: As more partners, customers and business applications exchange data through Web services, they may rely on variations of industry standard specifications, potentially interrupting business transaction flows due to lack of interoperability. By enforcing design-time as well as run-time WS-I Basic Profile 1.0 interoperability checks and balances, Web services interactions can be exchanged without disruptions and according to pre-negotiated compliance policies. --Web Services Virtualization for Centralized Security Management: Forum System's cutting-edge Web Services Virtualization allows the combination and orchestration of Web services across multiple servers. Disparate services can be exposed in a single secure and cohesive WSDL interface for centralized security management. The administrator can selectively pick and choose operations from the source WSDL document and using access control rules create entitlements to operations. This includes support for a FIPS (Federal Information Processing Standards) A series of publications issed by the U.S. National Institute of Standards and Technology (NIST) that specifies information security guidelines for federal government departments and agencies. secure UDDI (Universal Description, Discovery and Integration) An industry initiative for a universal business registry (catalog) of Web services turned over to the stewardship of OASIS in 2002 as the version 3 specification of UDDI was released. WSDL document publish and subscribe (1) To provide a source of information that users select from and then receive on a regular basis or when certain events occur. The service can be public or private, free or paid, and information can be provided via e-mail and the Web or by means of proprietary applications. . Forum Systems' suite of Web services security products meet government regulations through integrated information assurance architecture that employs multiple layers of security safeguards. These include deep logging and non-repudiation, policy change controls and auditing, DoD PKI (Public Key Infrastructure) A framework for creating a secure method for exchanging information based on public key cryptography. The foundation of a PKI is the certificate authority (CA), which issues digital certificates that authenticate the identity of Certification, and FIPS 140-2 Level III hardware security. Forum XWall V3.3 hardware, software and PCI-cards are available immediately ranging from $2,500 to $10,000. For a technical datasheet please go to http://www.forumsystems.com/products_xwall.htm. Trustworthy, ubiquitous and robust Web services can be only achieved by combining security controls that are proactive, always on and systematic throughout the life cycle of Web services. Forum Seamless Security Solutions Architecture (Forum S3A(TM)) for Web services brings together innovative products and technology that extends and enhances existing enterprise infrastructures with flexible data-level capabilities specifically designed for XML data and Web services transactions. About Forum Systems Inc. Forum Systems, Inc. is the leader in Web Services Security with a comprehensive suite of Trust Management, Threat Protection and Information Assurance solutions for the Automated Web. Forum Systems flexible hardware, software and embedded products make vibrant business communications possible by actively guarding XML data and Web services across networks and business boundaries. Forum's products have been chosen by over 40 Fortune 1000 industry leaders and are winners of Network Computing Magazine's Well-Connected 2004 Award and Product of the Year 2004 Award, Network Computing Magazine's Editor's Choice 2003 Award, Network Magazine's Product of the Year 2003 Award and DEMO 2004 Invitation. Forum Systems, founded in 2001, is headquartered in Salt Lake City, UT. For more information contact 801-313-4400 or http://www.forumsys.com/. Forum Presidio, Forum Sentry and Forum XWall are trademarks of Forum Systems, Inc. All product and service names herein may be trademarks of their respective owners. |
|
||||||||||||
Printer friendly
Cite/link
Email
Feedback
Reader Opinion