Savvis Locks Down The Cloud For The Enterprise

Building on the recent launch of its Cloud Compute solution, Savvis, a provider of outsourced managed computing and network infrastructure for IT applications, has announced a new addition to its Cloud Compute and Virtualized Utility Compute offerings - the Savvis Managed Web Application Firewall (WAF) Service.

The new service addresses the many challenges associated with securing virtualised Web applications commonly used within global enterprises’ cloud computing environments.

Savvis’ WAF service provides protection against Internet-based malware infection, a significant threat to Web commerce. Recent studies indicate that a majority of all Web-based malware is found on legitimate websites that have been compromised. Savvis’ WAF Service is specifically designed to mitigate these threats. It is available for individual enterprises and sits in front of the Savvis cloud computing environment.

Chris Richter, vice president of Security Services for Savvis, said, “Cloud computing solutions offer some very compelling cost benefits and are paving the way for an entirely new generation of data centres, but companies also demand solutions for keeping their data secure. The Managed WAF Service is a significant addition to our portfolio of security offerings for our cloud computing platform.”

More from Biztech

Future Group - Reliance Retail Deal approved by CCI RBI ban on cryptocurrencies takes effect; prohibition could force investors to tap the black market

Savvis WAF Service Details

Savvis’ Web Application Firewall Service leverages Imperva’s SecureSphere technology. Designed to help organisations protect sensitive financial, human resources and customer credit card data from application-based attacks, the service can accurately detect and block malicious Web requests. The service combines a dynamic white list policy model with up-to-date application signatures, session tracking and correlation rules for precise attack detection. The service monitors application activity and notifies customers of potential attack activity. Imperva’s Correlated Attack Validation technology can correlate violations across security layers and over time to accurately identify complex attacks. SecureSphere also inspects outbound traffic to identify possible leaks of sensitive data such as cardholder data and social security numbers.

Going further, the new service provides customers with a tool that helps them address their Payment Card Industry (PCI) Data Security Standard (DSS) obligations, including requirement 6.6, which mandates that companies must either deploy a Web application firewall, or follow a methodology that involves regular application-vulnerability assessments and remediation, for their public-facing Web applications.