SecureSpan

Layer 7 Technologies' SecureSpan product line focuses on the interrogation and processing of XML-based traffic; including features such as XML firewalling, threat protection, authentication, acceleration, and more. Each entry in the appliance product line can be software upgraded to the higher end appliances.

Current entries in the product line include:

- The SecureSpan XML Accelerator offloads processor-intensive XML parsing, validation and transformation operations from application servers, database servers and Enterprise Service Buses (ESB).

The SecureSpan XML Accelerator can be configured to validate XML documents against an acceptable predefined schema, probe XML data for specific content or values and transform documents from one version to another. Control over message processing operations is through SecureSpan policies, which provide visual tools to navigate XML structures and define message queries or transforms. Messages can be examined for specific content or context and routed to specific endpoints or returned to requestors after processing. All XML message processing is performed in onboard ASIC-based hardware accelerators.

The SecureSpan XML Accelerator is available as a 64-bit, multi-processor 1U appliance with onboard XML acceleration and optional SSL accelerator. Deployment options include acting as an XML co-processor for a network of XML applications in a data center or as XML offload for an ESB. All operations on the SecureSpan XML Accelerator can be configured independently for inbound and outbound traffic.

- The SecureSpan XML Data Screen is an appliance designed to cleanse XML data streams of threats, vulnerabilities and unauthorized content for common XML message formats including POX, SOAP, and AJAX.

Acting as a content filter, the XML Data Screen can be configured to scan, expurgate or transform malicious or malformed data, classified or unwanted "dirty" words and AJAX generated scripts. Policies can be defined to remove, block or transform illegal data or entire messages. Traffic to specific endpoints can be restricted or throttled based on user defined traffic limits, data formats or REST based URLs. HTTP headers and form data can be validated, transformed or removed as required. The XML Data Screen also protects applications from XML Denial of Service (XDoS) and other parser-based exploits.

The SecureSpan XML Data Screen is available as 64-bit, multi-processor 1U appliance with onboard XML acceleration and optional SSL accelerator. Deployment options include acting as a central entry point to a network of Web services, an on-ramp to an Enterprise Service Bus (ESB) or as an ESB co-processor for cleansing XML documents. All operations on the SecureSpan XML Data Screen can be configured independently for inbound and outbound traffic.

- The SecureSpan XML Firewall combines the capabilities of the SecureSpan XML Accelerator and Data Screen with identity and message level security. The SecureSpan XML Firewall includes support for leading directory, identity, access control, Single Sign-On (SSO) and Federation services. With it, SOA and security architects can define and enforce identity-driven SOA security policies leveraging SSO session cookies, Kerberos tickets, SAML assertions and PKI. The SecureSpan XML Firewall also provides architects with policy controls for specifying message and element security rules including the ability to branch policy based on any message context.

Key storage, encryption and signing operations can be handled in FIPS 140-2 certified acceleration hardware onboard the appliance or centrally through Safenet's Luna HSM. The SecureSpan XML Firewall has demonstrated compliance with all major WS* and WS-I security protocols including WS-Security, WS-SecureConversation, WS-SecurityPolicy, WS-Trust, WS-Secure Exchange, WS-Policy and WS-I Basic Security Profile. The SecureSpan Firewall also supports SAML 1.1 and 2.0 both in sender vouches and holder of key models.

The SecureSpan XML VPN Client is optional SOA client software (or hardware) used in conjunction with the SecureSpan XML Firewall. The SecureSpan XML VPN Client can be deployed on or in-front of client applications needing connectivity to secured Web services. The XML VPN Client automatically manages PKI, SSO, Federation and WS* compliance on SOA clients without coding.

The SecureSpan XML Firewall is available as a 64-bit, multi-processor 1U appliance with onboard XML acceleration and optional SSL/crypto accelerator with HSM or as Gateway software for Linux and Solaris server platforms. Deployment options include inline DMZ security or as a security coprocessor to an Enterprise Service Bus (ESB), providing operations including document signing, validation and encryption.

The SecureSpan XML VPN Client is available as a class library for integration into a client application, a stand-alone executable, or as hardware.

- The SecureSpan XML Networking Gateway combines the capabilities of the SecureSpan XML Accelerator, XML Data Screen and XML Firewall and VPN with message routing, mediation, virtualization and SLA features to address generalized Application Oriented Networking (AON) problems. Deployed either as a hardware accelerated appliance or gateway software, the SecureSpan XML Networking Gateway provides SOA and integration architects policy based control for mediating service interactions across message oriented middlewares, protocols, service versions and XML data formats. Through integration with leading registry products, the SecureSpan Networking Gateway can be also be implemented as a runtime policy enforcement point for SOA Governance initiatives.

For scenarios requiring advanced SLA capabilities, the XML SecureSpan Networking Gateway can be deployed in conjunction with SOA and Application Performance Management products to enforce routing and throughput policies based on requestor identity, Class of Service, message parameter, service availability or service performance. Customized routing fabrics can also be defined in the SecureSpan XML Networking Gateway based on a target address, requestor identity, SLA performance, transport type, message content or a policy defined condition. For B2B and wide area applications, routing decisions between XML Networking Gateway intermediaries can also be defined across security boundaries.

The SecureSpan XML Networking Gateway is available as a 64-bit, multi-processor 1U appliance with onboard XML acceleration optional and FIPS 140-2 SSL/crypto acclerator with HSM or as Gateway software for Linux and Solaris server platforms. The SecureSpan XML Networking Gateways also supports device virtualization and the SecureSpan Custom Policy Assertion SDK.

- The Layer 7 XML Firewall soft-Appliance is a virtual SOA and Web 2.0 security gateway built for generic server hardware. The Layer 7 XML Firewall soft-Appliance provides end-users identical functionality to the Layer 7 hardware-accelerated XML Firewall. It is designed for development, data center and virtualized server environments; and, once installed, additional instances of the soft-Appliance can be replicated for handling traffic spikes or evolving transaction volumes.

Features of the soft-Appliance include:

- Fully clusterable

- Leverages shared server, CPU and memory resources

- Traffic limiting controls

- Content routing and end-point redirection

- Content filtering, redaction and threat protection for XML, SOAP, and AJAX protocols

- WS* and WS-I compliance (including WS-S, WS-T, WS-SC, WS-SX, WS-SP, WS-F, WS-P, WS-I BSP)

- SAML 1.1, 2.0 and Kerberos token support

- Available identity integration with CA SiteMinder, Oracle Access Manager, Sun Access Manager, RSA Access Manager, Tivoli Access Manager, LDAP, AD and others

- WSDL interface security

- Graphical XML encryption and signing control

- Administrator configurable message logging and audit

- UDDI support

The Layer 7 XML Firewall soft-Appliance is available for a free 15 day trial.

product submission by Company Rep

Latest category updates via our RSS feed