XML Appliances for SOA and Web 2.0 Secure, Simplify and Scale Your Web Services XML Accelerator
XML Data Screen
Speed XML Processing, Validation and Transformation
Cleanse XML of Exploits, Malformed Data and Restricted Content
Problems Addressed • Accelerated XML message processing offload
Problems Addressed
• Accelerated document transformation and concatenation
• Prevent XML attack and intrusion
• Accelerated XML data validation
• Validate data structures
• Message versioning between applications
• Set traffic limits
• ESB co-processing
• Secure REST and AJAX
XML Firewall and VPN
XML Networking Gateway
Secure Your SOA, Share Your SOA Problems Addressed
Policy Based Service Mediation and Application Oriented Networking
• Control access to services and operations
Problems Addressed
• Secure service WSDL interfaces • Enforce WS* and WS-I standards
• Application Oriented Networking and XML routing
• Manage security for B2B relationships
• Service virtualization
• Audit transactions
• Centralized SLA enforcement
• Filter XML content
• Transport and protocol mediation • Runtime Enforcement of SOA Governance policies
XML Appliances for SOA and Web 2.0 Example Deployment Scenarios: XML Data Screen - Portal
XML Accelerator - ESB
External Web Clients
?
Enterprise Service Bus
?
XDOS Attack
?
Legitimate Traffic
?
Web Service
?
?
Parser Attack
Web Service SecureSpan XML Data Screen Cluster
SecureSpan XML Accelerator
XML Firewall and VPN - B2B
XML Networking Gateway - SOA Governance Corporate Network
SecureSpan Manager
Service Endpoints (Secure Zone)
SecureSpan Manager
Service Consumer with hard coded policy
WS-Policy
Registry Repository
WS-Policy
WS-Policy
Business Partner
External Firewall
SecureSpan XML Firewall Cluster
Corporate Identity Server Internal Firewall
WS-Policy
(DMZ) WS-Policy
Service Consumer with SecureSpan XML VPN Client
SecureSpan XML VPN Client
WS-Metadata Exchange
SecureSpan XML Networking Gateway Cluster
Web Services
WS-Policy
Innovations: • First XML appliances to combine 64-bit multi-processor architecture with XML ASIC and hardware crypto acceleration • Automatic clustering for enhanced scalability and availability • Addresses non-SOAP based Web services including REST and AJAX • WS-Policy based service security and mediation • Policy level integration with leading registries for SOA Governance enforcement • Identity integration with leading IAM, SSO and Federation products • Supports edge, datacenter, ESB and federated B2B deployments
Supported Standards and Specifications: • XML 1.0, SOAP 1.1, REST, AJAX, XPath 1.0, XSLT 1.0, WSDL 1.1, XML Schema & DTD, LDAP 3.0, SAML 1.1/2.0, PKCS #10, X.509 v3 Certificates, Kerberos, W3C XML Signature 1.0, W3C XML Encryption 1.0, FIPS 140.2, SSL/TLS 2.0 / 3.0, SNMP, SMTP, FTP, HTTP/HTTPS, JMS 1.0, MQ Series, Tibco EMS 4.0, WS-Security 1.0, WS-Trust 1.0, WS-SecureConversation, WS-MetadataExchange, WS-Policy, WS-SecurityPolicy, WS-PolicyAttachment, WS-SecureExchange, WSIL, WS-I, WS-I BSP, UDDI 3.0
Form Factors: • 1U rack mount appliance, 64-bit multiprocessor platform with XML acceleration ASIC, SSL accelerator and dual GE/FE NICS • Server software for Linux and Windows Server 2003 platforms* * Note: Supported features vary by product. Go to www.layer7tech.com or contact Layer 7 for details
Web Site: www.layer7tech.com Email:
[email protected] Phone: 800.681.9377
R
Copyright © 2006 Layer 7 Technologies Inc. All rights reserved. SecureSpan and the Layer 7 Technologies design mark are trademarks of Layer 7 Technologies Inc.