Portal Security - Web Application Firewall (WAF) - Overview

The CORISECIO solution integrates the powerful Deny All Web Application Firewall (WAF) into the SAP Portal and protects web applications against any attacks. Threat scenarios from Brute Force, Cross-Site-Scripting via session manipulation to entry of invalid parameters are reliably prohibited with high performance real-time scanning technology.

Amongst others the Web Application Filter allows to:

□ Protect portals and web applications against web attacks of all sorts
□ Use existing WAF solutions for protection of (SAP) portals
□ Check encrypted web services for malware
□ Use further flexible security functions
□ Provide WAF as domain wide Security Service

All components may be installed by the administrators with (SAP) standard tools. The solution is based on the CORISECIO securityRunTime, supports leading application server and portal applications and is SAP certified.