There are two main open-source web firewalls: ModSecurity and IronBee. Ivan Ristic has been involved in both. He first started work on ModSecurity some ten years ago and was soon joined by Ryan ...
I'm experimenting with a new setup: placing an IIS server behind a firewall and forcing all outgoing connections through a proxy server requiring authentication. The IIS server itself is a Citrix Web ...