Chapter 6. Application Firewall

While network-based attacks rely on vulnerabilities in transport layer protocols such as TCP or even lower level protocols, Web application attacks target vulnerabilities that are specific to the application, such as the input it accepts. Because this application-level visibility is missing in Standard Network Firewalls, they cannot offer sufficient fine-grained protection. This is where web Application Firewalls come in.

Application Firewall or AppFirewall, which is how it is commonly referred to, is available either as a standalone product, as an option with NetScaler Enterprise Edition or is included when purchasing NetScaler Platinum Edition. We will use the term AppFirewall everywhere in the chapter for easier reading.

Note

Payment Card Industry Data Security Standard (PCI-DSS) is a security standard that is aimed to certify whether your e-commerce infrastructure is secure enough for your customers to use for transactions. Web Application...