Is something like redudant if I use ASL

Forum Regular
Forum Regular
Posts: 213
Joined: Tue Jun 09, 2009 12:57 pm

Is something like redudant if I use ASL

Unread post by gaia »

I read about and I am wondering if ASL, when it comes to XSS/Injection protection, offers only the standard WAF protection or does it offer further protection, as Prevoty claims they do.
Rather than simply relying on past malware definitions or heuristics, SmartFilter uses “tokenizers, parsers, and profilers that in unison have the ability to perform syntactic/semantic operations on content,” according to the company. In other words, its algorithms understand how HTML and JavaScript code behaves within application and how that impacts users. When potentially dangerous activity or code is detected, the system prevents it from running and ejects the user responsible.
CentOS 6.9
ASL 4.0.19-37
User avatar
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 4119
Joined: Thu Feb 07, 2008 7:49 pm
Location: Chantilly, VA

Re: Is something like redudant if I use ASL

Unread post by mikeshinn »

Short answer, yes its redundant.

As for what our WAF does, it doesnt rely on signatures, and already stops zero days. I have no idea why it seems they asserts that wafs rely on signatures, in general thats just not the case for the industry.
Post Reply