IBM's WebSphere DataPower XML Security Gateway (the XS40) is a 1U appliance that operates as an XML proxy, specifically providing security-related features for XML-based communications (including Web services). The appliance is deployed inline between clients and application servers, and in addition to supplying security features for XML communications also serves as an XML processing point for the messages themselves; including XML parsing, Schema validation, XPath routing, XSLT, compression, URL rewriting, etc.

As an XML proxy, the device is able to not only interrogate XML communications for such security concerns as XML well-formedness, buffer overruns, and Denial of Service protection; but additionally to add value to such communications--including the enforcement of Web services access control (more below), application of encryption (which can be targeted to the field level) and digital signatures, content-based routing, and other capabilities. Malformed and/or malicious requests are logged for later forensics, and remote logging is supported.

Specifically for access control, the vendor notes that the product supports fine grain authorization features with the ability to control messages on a transaction-by-transaction basis based on the message payload, security policy, and user identity. Support is provided for on-board or off-board identity repositories, including RADIUS, LDAP, SAML and WS-Security mechanisms. SAML-specific features include the ability to consume SAML assertions, produce SAML assertions, and make SAML queries to SAML servers.

The appliance can be managed remotely or locally; with supported management methods including a drag and drop Web GUI, SNMP, or script-based configuration. Service level management features include support for SLM alerts and logging.

The new release of the XS40 is expected to debut on November 16, with pricing starting at $65,000.

Contact IBM for further information.

product submission by EITPlanet Staff

E-Mail this page to a colleague
send info about WebSphere DataPower XML Security Gateway

Suggest a link
for the WebSphere DataPower XML Security Gateway fact sheet