Newsletter Bee Ware Mars 2007


			Announcing v-Sentry

			Towards SOA

			v-Sentry benefits

			v-Sentry features

JULY 2007

	Announcing v-Sentry

	Global security for Web Applications and Web Services
			The collaboration between Vordel, pioneering leader in the Web Services security field, and Bee Ware, renowned European leader of secure Web architecture, has resulted in the creation of v-Sentry: a single and scalable security solution designed for organisations deploying Web applications that use XML and Web Services. Deployed in the DMZ, Web/XML application gateways play an increasingly important role in IT architectures that use application-to-application communication. They fulfil a critical role, by both securing applications and facilitating deployment while optimising performance.

	v-Sentry is a multi-functional gateway that enables the optimisation and security of Web applications such as Web Services. Available in a range of secure appliances, v-Sentry consists of a core optimisation and acceleration platform plus two optional modules for Web and XML security, making it possible to control and filter all types of Web applications. The flexibility of v-Sentry enables protection that is scalable to meet the needs of all application types, both current and future. Organisations benefit permanently from the safety and optimisation functions available within the chosen options. This flexible security platform provides the confidence required to commit to new application developments and leverage the enormous potential of new Service Oriented Architectures (SOA). Read the press release

TOWARDS SOA

Top

Web Services is a recent development in the world of application infrastructure. The use of Web Services widens the traditional application architecture design model. With Web Services it is possible to move beyond inflexible vertical applications to create more flexible horizontal applications that incorporate multiple components from existing legacy systems. By spanning multiple and heterogeneous infrastructures, Web Services enable the creation of a true Application Network based on application-to-application communication.
		While A Service Oriented Architecture (SOA) allows organisations to realise many potential benefits, by its very nature it can introduce new challenges that must be addressed by IT and network architects: - Optimisation of XML processing to guarantee performance - Message level security with, for example, SAML authentication support - Inter-operaton with Identity and Access Management Systems - Content validation of SOAP and XML messages - Virus scanning of SOAP attachments in messages - Effective use of SSL encryption
There are thus many requirements which are necessary to effectively secure and manage an SOA deployment. These are the essential features of an XML gateway. Using such gateways will ensure acceleration, conversion and optimisation, security and cryptography, compliance and availability, and thereby become an essential component of new application architectures.
Download the White Paper "Building trust in modern Web-oriented Applications"

v-Sentry: The technical solution

Top

Product Benefits

v-Sentry comes in the form of a secure appliance. Easy to install and immediately operational, v-Sentry brings a whole set of key functions which make it an essential tool for any organization deploying (SOA).

Automatic protection of Web applications (XSS, SQL Injection, Cookie Poisoning, etc.) and Web Services (Diagram poisoning, Clogging attacks, XML Bomb attacks, DTD external Entity attacks, Oversized payloads, Xpath injection etc.)
Support for all types of authentication: LDAP (including MS Active Directory), 2-factor mechanisms of authentication (eg. RSA SecurID), connector to solutions of Identity Management (CA SiteMinder...), Data Base
Virtualisation of Web applications and Web Services thanks to URL translation, masking of private addresses and file tree structure, and on-the-fly substitution of XML or HTML data.
Integration of Web Applications and Web Services in an infrastructure based on Numerical Certificates (including support of Automatic CRL management, OCSP and XKMS)
Integration of Web Applications in Single Sign On architecture (Web SSO) without modification of existing applications or installation of agents. Support of all Web authentification mechanisms (Client Certificate, BASIC, Digest, NTLM, Form-based, Header-based) and Web Services (SAML-enablement of SAML-unaware Web applications)
Antivirus filtering of all the data sent by customers to the back end servers via Web Applications (Upload File) or Web Services (SOAP Attachments).
Supervision and detection of Web Services traffic. SLA measurement. Audit logs and dashboard reports.