[AusNOG] web App firewalls.

[Adrian Chadd]

On Fri, May 28, 2010, Dobbins, Roland wrote:

> And as far as PCI DSS is concerned, mod_security on the Web servers themselves fulfills the requirement admirably, without detracting from one's security posture in the manner of a stateful 'web application firewall'.

But it doesn't come with a justifyable increase in the allocated cap-ex budget
for your fiefdom.


Adrian