Application of barracuda WEB application firewall in a mobile company

Due to the particularity of the mobile communication industry, a large number of applications provide services based on web sites. Therefore, the mobile company has extremely high requirements on web security protection, not only must it implement the largest web security protection, it must also carry huge traffic access and legal and regulatory audit compliance, and have multiple deployment modes to deploy in extremely large and complex networks.

Prevent Web attacks, have XML firewalls, and provide comprehensive identity and access control, which is the main requirement of the company's CIO for its website security equipment. After comparison and careful evaluation by various parties, after in-depth communication with barracuda engineers, the mobile company finally chose the barracuda WEB application firewall. Within one day, the customer quickly completed the installation and deployment of barracuda Web firewall. At present, a variety of Web applications, including the online business office, are under the protection of barracuda, in addition, maintenance only takes a small amount of time every week. Since its deployment, barracuda WEB application firewall has successfully defended against various network attacks, providing comprehensive security protection for its online businesses.

In this case, the customer chooses barracuda mainly because of the multi-dimensional security protection system:

1) supports BS architecture and manages web application firewall devices through HTTPS encryption;

2) support audit functions, such as source IP address and destination address persistence );

3 .) supports cross-site scripting attack defense, SQL Injection Attack Defense, website detection AttacK Defense, application layer DDOS attack defense, malicious crawling AttacK Defense, Cookie Stealing AttacK Defense, Cookie Poisoning Attack Defense, and information leakage attack defense, web page tampering defense, etc;

4. HTTPS traffic package analysis and certificate generation and import are supported.

5) supports HA deployment to ensure business continuity

6) supports advanced reverse proxy technology and supports flexible deployment modes such as bridge mode, bypass mode, and route mode.

7) supports ultra-fine granularity defense policies, and filters and protects the content, length, and type of specified URLs and parameters.

8.) all features of the product, including firmware updates, must be centrally managed and can be upgraded offline.

9) A complete log and report system that can quickly analyze, diagnose, and audit faults;

10) daily O & M is highly efficient. It provides 7x24 technical support for engineers and can provide on-site services as soon as the incident occurs.

Barracuda WEB application firewall (WAF) effectively prevents WEB page leeching, webpage Trojans, and phishing attacks, and protects the legitimate copyright of website resources, and provides targeted protection for a specific resource, file, audio, video, and other files ). It uses active protection methods to provide a policy configuration model for WEB applications based on their application characteristics, fully customized, and ultra-fine granularity. Barracuda can provide flexible deployment methods based on customer needs. In this case, barracuda WEB application firewall recommends the following two deployment methods:

1. Overview of bridge deployment:

· The WAN port of the barracuda device is connected to the network switch of the mobile company.

· Configure the protected web site IP address in the barracuda device and connect the LAN port to the background.

2. Overview of bypass deployment:

· The WAN port of the barracuda device is connected to the switch.

· Configure protected web site addresses in the barracuda device.

Why does the mobile company choose barracuda WEB application firewall:

1. user-friendly graphical interface and intuitive log and report systems

2. Ultra-fine granularity filtering Protection

3. world-leading reverse proxy technology

4. High performance and stability

5. Flexible deployment mode

6. Excellent Services

Features of barracuda products and solutions:

1. No software installation or network structure modification is required. All barracuda fish devices are installed and used.

2. All barracuda products perform any product operations and data modification through intuitive Web pages. We strive to simplify the configuration process without your IT staff having to be proficient in everything.

3. After-sales technical staff of barracuda who have been strictly trained can call the customer 7 × 24 hours a day to provide high-quality and practical technical support.

4. barracuda Control Center is a 7 × 24 technical center established by barracuda Corporation to monitor and block the latest cyberattacks. By collecting various types of information and analyzing the recorded information, all barracuda products are updated in real time through the automatic vitality update function of barracuda.

5. the barracuda device does not charge license fees based on the number of users, devices, ports, or functions. It strives to provide customers with an acceptable overall solution.