1. OVERVIEW
SECURE YOUR WEBSITES AND BUSINESS-CRITICAL
WEB APPLICATIONS
IT security threats are increasingly numerous and varied.
Web application attacks are of particular concern, with 97% of
security breaches caused by web vulnerabilities.1 Organizations
that must comply with PCI-DSS Requirement 6.6 should pay
particular attention to these threats. Yet traditional IT security
solutions, such as firewalls or intrusion detection/prevention
services (IDS/IPS), do not do enough to guard against Internet
attacks or offer comprehensive protection.
Web Application Firewalls (WAF) are designed to deter intruders
from exploiting vulnerabilities in web applications. They monitor
and inspect incoming traffic and intercept attacks before your
applications and data can be compromised. PCI DSS requires
either application code review or a web application firewall
(WAF) with proper positioning, configuration, administration,
and monitoring. However many organizations lack the security
personnel and expertise necessary to implement and tune a WAF
or remediate security incidents.
1 Barclays Card Services—January 2011
FACILITY FACT
SHEET
PRODUCT DATA
SHEET
SUNGARD SECURITY ANALYSTS FULLY
MANAGE YOUR WAF AND RESPOND
TO INCIDENTS 24/7
SunGard’s Managed Web Application
Firewall (WAF) safeguards websites and
business critical applications from Web
application attacks such as SQL injection,
cross-site scripting, OS command
injection as well as emerging threats
and zero-day exploits.
• SunGard’s Managed WAF service
provides 24/7 monitoring and incident
escalation by certified security
analysts, along with ongoing tuning
and management of the WAF.
Because the solution is managed,
SunGard eliminates the need for capital
expenditures, ongoing maintenance and
hardware or software updates. Instead,
customers pay an easily budgeted
monthly fee. The service can be deployed
rapidly and scales to meet immediate
and future needs.
• Implementing Managed WAF provides
support for compliance with PCI DSS
6.6, along with support for other
compliance mandates.
HOW IT WORKS: PROCESS FLOW
KEY BENEFITS
• Proven protection against web
application attacks, including zero
day attacks and emerging threats
• Fully managed service
• Supports PCI DSS 6.6 compliance
• Implement on-premise
or in hosted environments
MANAGED WEB
APPLICATION FIREWALL
LEGITIMATE USERS
ATTACKER
ATTACKER
NETWORK
FIREWALL
WEB
APPLICATION
FIREWALL
WEB
SERVERS

2. About SunGard Availability Services
SunGard Availability Services provides disaster recovery services, managed IT services,
information availability consulting services and business continuity management software.
To learn more, visit www.sungardas.com or call 1-888-270-3657.
Trademark information: SunGard and the SunGard logo are trademarks or registered trademarks of SunGard Data Systems Inc. or its
subsidiaries in the U.S. and other countries. All other trade names are trademarks or registered trademarks of their respective holders.
© 2013 SunGard. SEL-225 413
Connect with Us
BENEFITS
PROVEN PROTECTION
• Protects against SQL injection, cross-
site scripting, OS command injection
and other serious web attacks
• Automated learning engine develops
customized site security policies
• Web server cloaking and customizable
HTTP error handling shields web
servers from direct Internet access and
defeats fingerprinting attacks
• Whitelist-based filtering protects
against threats from unpublished
vulnerabilities in web server software
and applications
• Safeguards XML, JSON
and SOAP web services
• Protects against outbound data
theft and log data masking
LOWER COST, PREDICTABLE SERVICE MODEL
• Fully managed — Certified security
analysts provide proactive 24/7
monitoring and incident escalation as
well as ongoing tuning and
management of the WAF
• No capital expenses — you pay
predictable monthly fees with
no hidden costs
• Scale as needed
• No need to manage upgrades
or patching — you always have the
current product
• Can be implemented rapidly on-
premise or in hosted environments
with a non-invasive, no downtime
deployment mode, providing industry
leading security without physical
network changes
STRENGTHENED COMPLIANCE
• Meets PCI DSS requirement 6.6 to
install a web application firewall in front
of public facing web applications and
have security experts on hand to
manage the WAF on an ongoing basis
• Supports other compliance
mandates including HIPAA
IMPROVED PERFORMANCE, VISITOR EXPERIENCE
• Dynamic HTTP compression and static
content caching improve performance
• SSL termination and TCP connection
off-loading speed transfer rates by 50
to 100 percent
• Automatic fail-over and policy
synchronization ensure high availability
SUNGARD MANAGED SECURITY SERVICES
SunGard Managed Web Application Firewall is an important component of SunGard’s
suite of Managed Security services that supports a Defense in Depth Information Security
Strategy. Defense in Depth delivers a layered approach to security that relies on a series
of defenses, rather than on a single type of protection.
SUNGARD MANAGED WEB
APPLICATION FIREWALL