AppShield is the first security product to achieve Certification for Web Application Policy Enforcement (WAPE) from ICSA Labs, a division of TruSecure Corporation.

Checkpoint OPSEC Certified

Sanctum, Inc. is a member of Check Point's Open Platform for Security (OPSEC) which was founded in 1997 to provide complete, integrated multi-vendor security solutions.

AppShield integrates with Check Point's VPN-1/FireWall-1 using both ELA (Event Logging API) and SAM (Suspicious Activity Monitoring).

AppShield uses the OPSEC Event Logging API (ELA) to send Web application specific security event notifications to Check Point's VPN-1/FireWall-1. When AppShield detects any unauthorized behavior at the application level, it sends an alert identifying the computer that initiated the attack as well as the duration of the violation. The administrator can then analyze these alerts and terminate the malicious connection. This combined technology provides joint customers with a centralized monitoring and control capability to proactively prevent network and application-level hacking.

AppShield can be also be configured to use the OPSEC SAM in addition to ELA to request Check Point's VPN-1/FireWall-1 NG to block specific IP addresses from coming through the firewall. While AppShield may be already blocking these IP addresses from accessing the Web Server applications, SAM provides customers with a proactive, automatic way to stop these same malicious users from attacking other resources behind the firewall.

IBM: Tivoli Ready

Sanctum's AppShield is Ready for Tivoli and provides seamless integration with both Tivoli's Access Manager for e-business and Tivoli's Risk Manager.

AppShield adds application-level intelligence to Tivoli Risk Manager to provide the user with a comprehensive view of all activities going on at every OSI level. IBM Tivoli Risk Manager's comprehensive security management console simplifies and correlates the events and alerts generated by AppShield and other integrated security products enabling Global 2000 enterprises to assess the extent and severity of attacks quickly and effectively. AppShield integrates with Tivoli Risk Manager by leveraging the Tivoli Event Adapters. AppShield transforms events from its SQL database log format into a flat file that is analyzed by the standard Risk Manager adapter.

AppShield integrates in front of Tivoli Access Manager for e-business (formerly Policy Director) to architect as a multi-layer security process. AppShield can be installed on the same box or on a separate box as an application proxy (port or IP). AppShield processes incoming requests and validates them for the business logic. The request is passed to Tivoli Access Manager for authentication and access control. The cleaned request is then passed to the application server for processing.

To obtain more technical information on Risk Manager integration and the appropriate supplemental software, please contact Sanctum Customer Support at: 1-408-352-2020 or [email protected].

Sanctum's AppShield has been certified as RSA Keon Ready which ensures interoperability; AppShield can use RSA Keon digital certificates to authenticate itself and other applications.

RSA's Keon PKI products deliver a range of flexible security solutions, which enable organizations to conduct electronic business securely with employees, customers, suppliers and partners. It provides an environment for secure e-business by establishing authenticated, private and legally binding communications and transactions through digital certificates.

IBM: IBM Netfinity ServerProven and WebSphere Validated

Sanctum's AppShield is IBM Netfinity ServerProven and WebSphere validated in real-life environments to ensure interoperability and to minimize integration risks allowing for smoother installations and reliable implementation.