SteelApp Security Hints and Tips

[#1]

A selection of SteelApp security articles, for SteelApp Traffic Manager and SteelApp Web App Firewall. Listed from the most recent to the oldest, let me know if you have other articles to add to this list.

Poodle 2.0:

SteelApp not vulnerable to POODLE 2.0 (CVE 2014-8730)

CVE-2014-8730

Poodle:

Disabling SSL v3.0 for SteelApp

Re: Assuming TLS, what ciphers does SteelApp 9.8 support?

CVE-2014-3566

ShellShock/Bash:

TrafficScript rule to protect against "Shellshock" bash vulnerability (CVE-2014-6271)

CVE-2014-6271

Heartbleed:

Heartbleed: Using TrafficScript to detect TLS heartbeat records

Would Stingray automatically protect servers from Heartbleed?

CVE-2014-0160

Whitepapers:

Global-scale Web Application Security for DOD

Why Web Application Firewalls Matter

Miscellaneous Articles:

The "Contact Us" attack against mail servers

Protecting against Java and PHP floating point bugs

Managing DDoS attacks with Stingray Traffic Manager

Enhanced anti-DDoS using TrafficScript, Event Handlers and iptables

How to stop 'login abuse', using TrafficScript

Bind9 Exploit in the Wild...

Protecting against the range header denial-of-service in Apache HTTPD

Checking IP addresses against a DNS blacklist with Stingray Traffic Manager

SteelApp TrafficManager SAML 2.0 Protocol Validation with TrafficScript