NSFOCUS’s WAF appliance provides world-class protection across all phases of an attack.  It ensures web application uptime, while minimizing your security risks.

• Before Attacks: WAF can integrate automatic web application scanning tools to carry out accurate and efficient "black box" tests.
• During Attacks: WAF effectively blocks attacks such as defacement, leeching, data leakage and DDoS, safeguarding website security and integrity.
• After Attacks: WAF provides diagnosis and remediation, reducing the impact caused by webpage defacement, web-based malware, information leakage, etc.

• Addresses the full range of threats associated with web application services, including SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), leeching, malicious scanning, crawler, malformed HTTP validation packets, fingerprinting, cookie poisoning, and denial of service (DoS) attacks;
• Keeps invalid, malicious and illegal packets from damaging your web applications, avoiding data leakage and potential reputation loss.

Superior to traditional proxy mechanisms, NSFOCUS’s WAF can be easily deployed in transparent mode without requiring any modification or reconfiguration to your current network topology or web applications.

Security vulnerabilities inherent in many web applications can make code review and recoding hard to implement in live production environments. The NSFOCUS WAF appliance helps you meet PCI DSS and other industry-standard regulations, such as those that recommend deploying a Web Application Firewall or conducting periodic code reviews as a way to ensure compliance.

NSFOCUS WAF provides a solid defense against the most prevalent HTTP and TCP DDoS attacks, ensuring that your website stays up and running, even when others are trying to take it down.

NSFOCUS’s WAF provides a wide variety of monitoring functions and multi-dimensional statistical reports at a granular level.  Security operators can easily monitor the current or historic running status of the website and rapidly locate emerging security incidents. And the sooner you can find potential trouble spots, the sooner you can deal with them, before they get to be a major problem.