Open main menu
Home
Random
Recent changes
Special pages
Community portal
Preferences
About Wikipedia
Disclaimers
Incubator escapee wiki
Search
User menu
Talk
Dark mode
Contributions
Create account
Log in
Editing
Application firewall
(section)
Warning:
You are not logged in. Your IP address will be publicly visible if you make any edits. If you
log in
or
create an account
, your edits will be attributed to your username, along with other benefits.
Anti-spam check. Do
not
fill this in!
== Implementations == There are various application firewalls available, including both free and open source software and commercial products. === Mac OS X === Starting with Mac OS X Leopard, an implementation of the TrustedBSD MAC framework (taken from FreeBSD), was included.<ref>{{cite web|url=http://www.trustedbsd.org/mac.html|title=Mandatory Access Control (MAC) Framework|publisher=TrustedBSD|access-date=2013-09-05}}</ref> The TrustedBSD MAC framework is used to sandbox services and provides a firewall layer, given the configuration of the sharing services in [[Mac operating systems|Mac OS]] X Leopard and Snow Leopard. Third-party applications can provide extended functionality, including filtering out outgoing connections by app. === Linux === This is a list of security software packages for Linux, allowing filtering of application to OS communication, possibly on a by-user basis: * [[AppArmor]] * Kerio Control β a commercial product from [[Kerio Technologies]] * [[ModSecurity]] β also works under Windows, Mac OS X, [[Oracle Solaris]] and other versions of [[Unix]]. ModSecurity is designed to work with the Web servers IIS, Apache2 and NGINX. * Portmaster β an activity monitoring application by Safing. It is also available for [[Microsoft Windows]].<ref>{{Cite web |title=Safing Portmaster |url=https://safing.io/portmaster/ |access-date=2021-11-04 |website=safing.io}}</ref> * [[Systrace]] * Zorp firewall === Windows === * Portmaster * [[Windows Defender Firewall|Microsoft Defender Firewall]] * [[WinGate]] === Network appliances === These devices may be sold as hardware, software, or virtualized network appliances. '''Next-Generation Firewalls:''' *Cisco Firepower Threat Defense *[[Check Point]] *[[Fortinet]] FortiGate Series *[[Juniper Networks]] SRX Series *[[Palo Alto Networks]] *[[SonicWALL]] TZ/NSA/SuperMassive Series '''Web Application Firewalls/LoadBalancers:''' *[[A10 Networks]] Web Application Firewall *[[Barracuda Networks]] Web Application Firewall/Load Balancer ADC *[[Citrix Systems|Citrix NetScaler]] *[[F5 Networks]] BIG-IP Application Security Manager *[[Fortinet]] FortiWeb Series *[[KEMP Technologies]] *[[Imperva]] '''Others:''' *[[CloudFlare]] *[[Cisco Meraki|Meraki]] *[[Smoothwall]] *[[Snapt Inc]]
Edit summary
(Briefly describe your changes)
By publishing changes, you agree to the
Terms of Use
, and you irrevocably agree to release your contribution under the
CC BY-SA 4.0 License
and the
GFDL
. You agree that a hyperlink or URL is sufficient attribution under the Creative Commons license.
Cancel
Editing help
(opens in new window)