Publisher's Description
From Privacyware:
ThreatSentry is a Web Application Firewall and Intrusion Prevention solution that helps system administrators improve web application security and comply with regulatory demands such as Section 6.6 of the Payment Card Industry Data Security Standard. ThreatSentry 4 supports Windows Server 2008 R2 and IIS 7 on 32 and 64 bit systems. An ISAPI Extension hosted in MMC, ThreatSentry's knowledgebase of pre-configured filters is designed to identify and block a broad range of web application threats including Structured Query Language (SQL) Injection, DoS, Cross Site Request Forgery (CSRF/XSRF), Cross-Site Scripting (XSS) and other attack techniques. ThreatSentry's conventional defense capabilities are augmented by a behavior-based Intrusion prevention that profiles typical request activity and detects unusual events and patterns indicative of zero-day and targeted attacks. Default configuration settings are designed to deliver optimal out-of-box performance and administrative ease.
What's new in this version: Version 4.0.57 added SQL Settings dialog to Modify option to provide enhanced reconfiguration of SQL and Logon settings and fixed minor support expiration bug in software license registration component and native tsdb backup feature bug (introduced in v.53).
More Popular Firewall Software downloads
- ZoneAlarm Free Firewall
6,834 downloads
- PeerBlock
1,947 downloads
- PC Tools Firewall Plus Free Edition
1,463 downloads
- Comodo Firewall
1,177 downloads
- Ashampoo FireWall Free
1,098 downloads
-
All versions:
5.0 starsout of 3 votes
-
Current version:
0 stars Be the first to review this product -
My rating:
Write review
Results 1-3 of 3
-
"great protection for IIS and one-on-one support"
Version: ThreatSentry IIS Web Application Firewall (64-bit) 3
Pros
Excellent protection for my web servers. Privacyware technical support walked me through the entire app on webinar during 30-day trial. Here are the features that I like the best, but if you have IIS servers, ThreatSentry should be evaluated. I've been running since January. Previous reviewer hit the nail on the head.
- two layers of protection in one application (IIS application firewall and IIS-specific behavior-based IPS)
- very granular control over blocked IPs, alert management, IIS attack signatures, and page request strings, etc.
- complete notification layer
- no visible performance hit
- provides exceptional visibility to unwanted/malicious traffic
- comparatively low price
Cons
ThreatSentry performs beyond expectation and is well worth the price - no cons.
-
"My favorite "fire and forget" product that provides a superb IIS protection"
Version: ThreatSentry IIS Web Application Firewall (64-bit) 3
Pros
- VERY good price
- Protects from crosssite scripting and SQL injection
- Extremely easy to use the product that has a very sophisticated behavior engine technology.
- Works right out of box for majority of users.
- There is nothing to configure unless there is a specific need to cover special cases.
- For power users and depending on the web site technology being used there are numerous configuration options that cover a great number of different scenarios. I run this product on training and now mostly relay on behavior engine - it works great.
- There is an adequate notification layer which might be beneficial for "busy-no-private-life" administrators
- Has capability to block events based on time pattern which can be very effective against denial of service (DOS) attacks.
- Demands surprisingly less feedback from administrator. This is when there is a need to re-classify event
- My favorite feature- support for MS exchange server on the web. As a result almost no false positives when protecting MS exchange on the web.
Cons
none
-
"double layer of defense for Windows web servers"
Version: ThreatSentry IIS Web Application Firewall (64-bit) 2.0
Pros
Vendor describes ThreatSentry as a host ips, but it's really an application firewall/host ips combo. Front line is all rules-based; i.e signatures, black-listed IPs, malicious requests, etc. If a request gets through that, it has to face the IPS layer which compares the request against the baseline TS establishes when you first install the app. If the request is exceptionally unusual, TS blocks it.
ThreatSentry is a very affordable product that would be a good value at 10x the price. I recommend it strongly for anyone interested in protecting their Windows web servers with a layered approach.
Pros include: 1) effective multi-layered defense, 2) ease of use, 3) lots of features, 4) dirt cheap.
Add Your Review
Submit your reply
E-mail this review
Report offensive content
See more CNET content tagged:
Previous Versions:
%20-%20Download.com&srcUrl=http://download.cnet.com/ThreatSentry-IIS-Web-Application-Firewall-64-bit/3000-10435_4-10393379.html&x_breadcrumb=20:2023:10435){kind=small}