Giới Thiệu · DotDefender for IIS
DotDefender provides plug-and-play protection against SQL Injection, Cross-site scripting, Path Traversal, and many other application attacks. Web server security is achieved by rapid deployment of dotDefender as a software plug-in. Residing on the web server, DotDefender can be installed and implemented in minutes without influence on traffic or network architecture. The dotDefender Web site protector comes with a predefined set of internet security rules for out of the box best practices website protection. Automatic live update ensures Web site security is ready to counter the latest malicious attacks.
Version 3.85 improves auditing: Zero performance impact while auditing full change details according to PCI requirements.
có gì mới trong phiên bản 3.85 · DotDefender for IIS
1. License Registration via dotDefender: To streamline and
simplify the current download and installation process, a
license file will be sent via email for completing, during
the installation process of dotDefender.
2. Improved Auditing: Zero performance impact while
auditing full change details according to PCI requirements
3. Alert Severity: Alerts are now assigned severity level
scores according to the danger the attack poses on the system
4. Rule Weights: Rules are now assigned weights to define order of rule processing.
For instance, you can now apply a "deny-all-by-default" policy, consequently allowing small exceptions through, on a per-need basis
5. PCI-Compliant User Management: In compliance with
PCI regulation, a unique user group is created to include
dotDefender administrators, allowing separation of roles
between system administrators and website security administrators. This feature satisfies the PCI requirement for least-privileged user accounts
6. Active-Directory User Management: dotDefender offers
full support for Microsoft�?�® Active Directory in order to identify administrators
7. Fully Automatic Upgrades: dotDefender upgrades to version 3.85 without any need for user intervention
8. Performance Monitoring: dotDefender's security policy performance may now be assessed "on the fly" using real-time statistics