
Hillstone Virtual-Web Application Firewall
Overview
Hillstone vWAF is a virtualized network security product designed specifically for cloud computing environments. It has most of the network services common to Hillstone's hardware-based devices, and is an ideal solution for protecting web resources within Amazon Web Services. It provides Amazon Web Services users with professional application-layer in-depth defense for websites and web application systems, helps users meet the construction requirements of policies and regulations such as network security law and information security level protection, and improves the security and robustness of web business systems. Key features: Mitigation and elimination of the OWASP TOP10 risks that have the greatest impact on the web business Access control for VPCs: Virtual private clouds provide logical security boundaries to protect virtual web data centers. Easy deployment and management: vWAF can be easily modified or instantiated from a template to address highly dynamic changes in virtual machines and virtual environments. Multi-tenant support: Supports tenant-specific website configurations and security policies for maximum control and protection. Switch between WV02/04 according to the license. It supports 2-4 core EC2 instances and provides high performance.
Highlights
- The OWASP TOP10 are the ten security risks that have been proven over a long period of time and have the most serious impact on web business, and are an important reference for web security development. Hillstone Networks Technology WAF uses many leading technologies such as deep proxy, application vulnerability scanning, log aggregation, and intelligent self-learning to provide a complete OWASP risk mitigation and elimination solution. The three risks of XML external entities added in 2017, unsafe deserialization, insufficient logging, and auditing can also be addressed
- Supports management integration through RESTAPI, has a consistent graphical management interface with WAF, and is intuitive and easy to use
- Supports rich log records, report statistics and presentation; supports device registration to the Hillstone Cloud·Jingyun service platform, and centralized real-time monitoring through mobile apps and the web
Details
Pricing
Hillstone Virtual-Web Application Firewall
Vendor refund policy
Currently, returns are not supported, and you can cancel the order at any time by contacting the back office before it has been officially authorized.
Legal
Vendor terms and conditions
Content disclaimer
Usage information
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
First release
Additional details
Usage instructions
Link to the operating system via ssh, the default username is “hillstone”. To access VWAF's WebUI, you need to enable the HTTPS service and change the port number. Please follow the steps below:
- After logging in to the CLI interface using an SSH connection, use the following sss command to change the HTTPS port to 8888. SG-6000# https port 8888
- Enable HTTP access to eth0 interface: SG-6000# interface ethernet0/0 SG-6000 (config-if-eth0/0) # manage https
- For security reasons, you need to re-configure a new password for the Hillstone user. The example is as follows: SG-6000# admin user hillstone SG-6000 (config-admin) # password hillstone1234
- On a PC connected to the Internet, open a browser and enter the elastic IP address and port number 8888 corresponding to eth0 to access the vWAF WebUI interface.
Resources
Support
Vendor support
Working hours: Monday to Friday 9:00-18:00 Enterprise support Support method: 400-828-6655 to 2 tac@hillstonenet.com Scope of support: Product function user guide remote troubleshooting Trial license: Comes with a 30-day default license. How to buy: 400-828-6655
Amazon Web Services infrastructure support
Amazon Web Services Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.