Enterprise-class Web Application Firewall for IIS

The IIS Web Security Solution.

ServerDefender VP Web application firewall is designed to provide powerful security against Web attacks in an affordable, easy-to-use package for IIS admins.

SDVP premium security will:

• Stop hack attempts against IIS
• Maintain Payment Card Industry Data Services Standard compliance
• Prevent data theft and breaches
• Stop unauthorized site defacement, file alterations and deletions

Dynamic IIS Security

The Internet is a dangerous and ever-evolving place. SDVP provides powerful Web app security to:

• Block top known threats like SQL Injection and Cross Site Scripting
• Learn to recognize and block new threats by analyzing all site traffic and flagging suspicious or malicious users
• Dynamically tightens security if attacks increase
• Deep packet analysis scans what's inside files, not just file types
• Differentiate between harmful and harmless traffic to prevent false-positives
• Granular rules let you shrink wrap security policies to fit your site's needs
• SDVP's Web application security requirements are based on the OWASP Top Ten Project

Security Made Easy

SDVP's intuitive user interface makes securing your web apps easier than ever.

• Increase and decrease security levels with the click of a mouse using Enforcement Level slider
• Security enforcement level icons let you know how firm your security is set against individual threats
• Set rigid security without implementing complex rules

Security Information & Event Management (SIEM)

A Web application firewall that logs security data so you can see exactly what's happening on your sites - and alerts you when your away from your desk.

• Interactive LogViewer
  See security events in real-time and customize security policies on the fly.
• Flexible Alerts
  Alerts of web attacks sent right to your email (HTML and plaintext), SNMP, Windows Event Viewer (local and remote), and Syslog-NG.
• Global and Site-Level Monitoring
  View security reports locally on your server or remotely via the Web.
• Daily Reports
  Summaries of key site traffic trends and anomalies, emailed nightly.

PCI Compliant From Birth

The Payment Card Industry Data Security Standard (PCI DSS) based its Web application security requirements on the OWASP Top Ten Project. ServerDefender VP's security controls were modeled on that same project.

Support and Upgrades

• Free technical support during trial evaluation period.
• 60 day Standard Support included with purchase.
• Extended Standard & Premium support plans available.
• Major version updates have a fee of 35% (learn more)
• Minor version updates are provided free to current support plan holders
• Request a quote for your major version upgrade discount

Security You Can See - Features That You Need

We appreciate customer feedback. So we tailored the changes in SDVP 2.0 to your needs, so we could make the most user-friendly Web application firewall for IIS.

Slide Into Security

Overwhelmed by complex configuration options? We have you covered.

Standard View lets you slide left for looser security and slide right for firmer security. It's as simple as that.

Don't worry - SDVP's powerful and granular controls are just a click away in Expert View - for the most custom security experience for IIS.

Reports You'll Look Forward to Reading

Daily Reports with your site's most important security events and trends - everywhere you go.

In SDVP 2.0 Daily Report emails are attractive and easy-to-scan, with the most important info bubbled right to the top. They highlight the vital data you need to keep informed about the security of your sites - even when you're not at your desk.

One Wizard to Rule Them All

With only one set-up wizard, your Web application firewall can be set up in minutes.

Need to get up and running as quickly as possible? Go with the Config Wizard's Standard Mode - it will get you there in just a few screens. Have a lot of complex Web apps and need to tune each one's security just so? Expert Mode is right for you:

Additional Web App Firewall Features

Defense

Analyzes, detects and responds to suspicious activity, accurately differentiating between trusted and untrsuted behavior to thwart hacker attacks.

• Anti-hijacking control with hardened sessions
• User input validation and sanitization
• Fewer false positives with granular exceptions
• Site-by-Site security control management
• Advanced Bot detection and control
• IP Blocking controls

Alerting, Visuals, and Setup

• Multiple configurable alerting options; including email, SNMP, syslog
• Detailed daily reports via Web and Email
• LogViewer with highly detailed searchable and filterable security logs
• Multiple configuration wizards to aid with proper set-up and deployment

Benefits

• Premium PCI compliant Web application firewall protection
• Advanced protection against common attacks such as SQL injection, cross-site scripting (XSS), and more
• Site awareness at a glance
• No training or signatures required
• Highly customizable security policies
• Custom integration and testing services available