Most organizations today are hybrid. Therefore, they are facing a complex hybrid IT landscape combining on-prem, private cloud and multi-cloud. Securing distributed environments is a huge challenge for several reasons. First, the quality of security – most cloud security tools use ‘negative’ security only. Second, varying levels of protection - each environment has its own security policy. Third, inconsistent logging or reporting - it is impossible to get overall visibility across all platforms and applications. And finally, there is no centralized management – since there are multiple management tools and interfaces, each with different capabilities.
Radware Application Protection as-a-Service, powered by SecurePath™, is a revolutionary solution. It provides State of the Art protection, based on ‘positive’ security model, and comprehensive suite of WAF, bot, API, and DDoS protections. It allows consistency across clouds, and identical security coverage for all applications, no matter where they are deployed. This happens through frictionless integration and flexible deployment options in existing processes, without interruptions. All this through full centralized visibility - single solution with a single console for centralized security management across all platforms.
What is Radware SecurePath?
Radware SecurePath is an API-based, cloud application security architecture for Radware's Application Protection-as-a-Service solutions, designed from the ground up to optimally protect applications deployed across any cloud and data center — on-premise, private cloud, and all public cloud environments – while improving security, uptime, and performance. This can allow your organization to migrate applications between environments while maintaining consistent, cross-platform security with centralized management, reporting and analytics.
To explain it in the simplest possible way: A software detector monitors application traffic to the origin server. The detector communicates with Radware’s analysis engine, which processes its findings and alerts against any malicious traffic. Finally, host transactions are blocked only when malicious traffic is detected.
In Radware we call it “connector.” The connector is installed on the customer owned instances, and on each client request an event is triggered. The connector builds a new HTTP request "simulating" original request as close as possible and sends it to a VIP of a pre-configured Cloud WAF application. Cloud WAF performs the inspection of the request and checks if it is malicious. Based on the response the plugin will either block the request or pass it.
With this new architecture, Radware's cloud application protection services can be deployed traditionally inline, or as an API-based, out-of-path service, to minimize interruption and impact.
Consider These 5 Things When Evaluating Radware SecurePath
Radware’s unique architecture and innovative approach bring several advantages that provide key benefits over traditional WAF deployments.
1. Flexibility in Deployment
Radware SecurePath offers various deployment types. It can be deployed either as cloud based inline or API-based out-of-path solution. As a customer, you can choose whichever architecture will be efficient for every application based on your preferred business or technical considerations.
2. No Routing Changes
Out-of-path solution does not add any traffic hops. Domain Name System (DNS) and Border Gateway Protocol (BGP) routing changes are not required with our SecurePath solution since traffic goes straight to the application server.
3. Reduced Latency
With our SecurePath solution, customer communications go from the client directly to the application server, without any interruptions. It means that you will have full control over latency. Our solution is designed to be as unintrusive as possible.
4. No Inline Processing
In case of service interruption, end users will not be impacted. Inline components inherently add a point of failure to the system. With our out-of-path solution, in the event of an outage, you will not be impacted.
5. No SSL Certificate Sharing
Our solution uses the application’s native SSL certificates. There is no need to share keys, maintain user privacy and meet regulatory requirements. This means that sharing certificates with third-party vendors is not required.
As explained above, our solution has significant advantages. It can help you especially if you cannot share your SSL Certificates, if you are using AWS CloudFront CDN or GCP APIGEE, if you are using Radware/F5 ADC looking for Fully Managed Security Service, if you don’t want another hop/server/proxy as inline, or if you don't care your WAF inspection which located in outside company.
If so - You Will Want and Need Our SecurePath Solution!
With the migration of applications to the cloud, there is a growing need to provide an out of path solution for security enforcement VS sending all the traffic through a specific POP (Point of Presence). Out-Of-Path solution has the benefit of reduced latency as the bulk of the traffic is not passed through a POP. In addition, it is more reliable as in case of the end point failure traffic, flow is not impacting only the security service. Existing security solutions provide partial coverage. Unlike Radware SecurePath which is uniquely architected for cross-cloud application protection and allows maximal flexibility with inline and out-of- path deployment options. With our solution, user requests are routed directly to application server. The software detector monitors application traffic to server, and the WAF engine analyzes data and blocks malicious host transactions.
Our solution will provide you comprehensive coverage against all attack vectors: in the WAF world – protection against OWASP Top 10 threats and more. In API Protection - discovery and protection of APIs against abuse. In Bot management - easily distinguish between human and non-human traffic. So, take the burden off your shoulders and outsource security management to Radware’s team of security experts.
For More Information
If you are wondering how prepared your organization is to stop bad actors, take advantage of Radware’s free online security assessments. For learning more about SecurePath - Radware SecurePath™ architecture!. And do not hesitate to contact Radware cybersecurity experts. Looking forward to hearing from you.