F5 Networks' TrafficShield(R) Application Firewall Protects Against Common Application Security Attacks

Stringent Third-Party Testing Measures TrafficShield Against the Industry's De Facto Standard for Web Application Security; Verifies That It Provides Solid Protection

F5 Networks, Inc., (Nasdaq:FFIV), the global leader in Application Traffic Management, today announced that Aspect Security, a leading application security services provider, has tested F5's TrafficShield web application firewall and found that it meets its expectations for a web application firewall. The tests were based on the OWASP (Open Web Application Security Project) Top Ten list of application vulnerabilities, which serves as the industry's de facto standard for measuring web application security. In the tests, TrafficShield was used to protect WebGoat, a J2EE application created by OWASP that contains built-in security flaws and is used both to test security products and as a security education tool.

"Web application firewalls can provide significant protection for both internal and external facing applications," says Jeff Williams, CEO of Aspect Security, and one of the original authors of OWASP's Top Ten list. "Traditional network firewalls can't do the job; you need a device that's specifically designed to protect against web application vulnerabilities. Our testing showed that F5's TrafficShield product significantly reduces the risk associated with common web application security attacks."

The OWASP Top Ten list consists of the following web application security vulnerabilities:

-- Invalidated input

-- Broken access control

-- Broken authentication and session management

-- Cross-site scripting (XSS) flaws

-- Buffer overflows

-- Injection flaws

-- Improper error handling

-- Insecure storage

-- Denial of service

-- Insecure configuration management

For more details about the test results, go to http://www.f5.com/f5products/products/TrafficShield/Aspect_F5_ TrafficShield_Summary_Report.pdf. (Due to its length, this URL may need to be copied/pasted into your Internet browser's address field. Remove the extra space if one exists.)

"The market is inundated with all kinds of security solutions, which creates a lot of confusion for customers evaluating products," said Marty Jost, Director of Product Management and Marketing at F5 Networks. "Independent organizations like OWASP help customers cut through the clutter by providing standardized criteria by which they can carefully evaluate the proper solution. Aspect's testing of TrafficShield provides the market with another level of independent validation and ensures customers that their web applications are protected from the OWASP Top Ten attacks."

About F5 Networks

F5 enables organizations to successfully deliver business-critical applications and gives them the greatest level of agility to stay ahead of growing business demands. As the pioneer and global leader in Application Traffic Management, F5 continues to lead the industry by driving more intelligence into the network to deliver advanced application agility. F5 products ensure the secure and optimized delivery of applications to any user -- anywhere. Through its flexible and cohesive architecture, F5 delivers unmatched value by dramatically improving the way organizations serve their employees, customers and constituents, while lowering operational costs. Over 9,000 organizations and service providers worldwide trust F5 to keep their businesses running. The company is headquartered in Seattle, Washington, with offices worldwide. For more information go to www.f5.com.

All brands, names, or trademarks mentioned in this document are the property of their respective owners.

Author:  

Email:    

Topic:    

Content:

Related Articles

• Network Access Control - a Necessity as the “Doorman” Approach to Network Security Fails to Protect Enterprises
  1 July 2005



• Anfibia Announces Deskman SE 6, Advanced Desktop Security for Windows XP
  30 June 2005



• Network Security: All You Must Know on One Chart
  27 June 2005



• Ultimate PC Solution for Personal Computer Security Presented by PC Assurance Company
  22 June 2005



• New ISO 17799 Security Standard Published
  20 June 2005



• Massive Credit Card Security Breach Puts 40 Million Consumers at Risk for Identity Theft
  19 June 2005



• Citadon to Extend its Online Security Offerings with Technology from Bharosa
  17 June 2005



• International Biometric Group Delivers Iris Recognition Test Report to the US Department of Homeland Security
  16 June 2005



• Elemental To Host Industry Webinar on Implementing Security Policies in Today's Dynamic Enterprise Networks
  14 June 2005



• Colorado Technical University Unveils Bachelor of Computer Networking and Security
  14 June 2005