Re: PCI DSS Req. 6.6 ( Web Application )

[Adriel Desautels <adriel () netragard com>]

Mohamed,
	I do not specifically have any options, only recommendations. Have you 
already performed a Web Application Security Assessment against your 
application? Are you using the reverse proxy to protect an application 
so that you can try and avoid having the assessment done? Tell me more 
about your requirements and maybe I can help.

Regards,
        Adriel T. Desautels
        Chief Technology Officer
        Netragard, LLC.
        Office : 617-934-0269
        Mobile : 617-633-3821
        http://www.linkedin.com/pub/1/118/a45

        Join the Netragard, LLC. Linked In Group:
        http://www.linkedin.com/e/gis/48683/0B98E1705142

---------------------------------------------------------------
Netragard, LLC - http://www.netragard.com  -  "We make IT Safe"
Penetration Testing, Vulnerability Assessments, Website Security

Netragard Whitepaper Downloads:
-------------------------------
Choosing the right provider : http://tinyurl.com/2ahk3j
Three Things you must know  : http://tinyurl.com/26pjsn


Mohamed Farid wrote:
> Thanks - but do you have another options ?
>
> Mohamed Farid ,CISSP,CCSP,S+ 
> m.farid.shawara () gmail com  
>  
> -----Original Message-----
> From: Adriel Desautels [mailto:adriel () netragard com] 
> Sent: Tuesday, May 27, 2008 11:24 PM
> To: Mohamed Farid
> Cc: security-basics () securityfocus com
> Subject: Re: PCI DSS Req. 6.6 ( Web Application )
>
> Mohamed,
>         There is an entire thread about this subject. My recommendation was
> to 
> use Mod Security. http://www.modsecurity.org.
>
> Regards,
>         Adriel T. Desautels
>         Chief Technology Officer
>         Netragard, LLC.
>         Office : 617-934-0269
>         Mobile : 617-633-3821
>         http://www.linkedin.com/pub/1/118/a45
>
>         Join the Netragard, LLC. Linked In Group:
>         http://www.linkedin.com/e/gis/48683/0B98E1705142
>
> ---------------------------------------------------------------
> Netragard, LLC - http://www.netragard.com  -  "We make IT Safe"
> Penetration Testing, Vulnerability Assessments, Website Security
>
> Netragard Whitepaper Downloads:
> -------------------------------
> Choosing the right provider : http://tinyurl.com/2ahk3j
> Three Things you must know  : http://tinyurl.com/26pjsn
>
>
> Mohamed Farid wrote:
> > Dear All :
> >
> > Any recommendations for a cost effective Web Application Firewall to cover
> > the PCI DSS Requirement 6.6 ? 
> >
> > Thanks ,,,
> > Mohamed Farid ,,,