RE: [WEB SECURITY] Re: Comparisons of Web ApplicationFirewalls

["Martin O'Neal" <martin.oneal@xxxxxxxxxxxx>]

> We're talking about blocking here, 
> when the "intelligent" WAFs will silently 
> drop packets - I challenge someone to 
> detect a silent drop of a packet traveling 
> across a network device...

Well, the dropped packets won't get a response, and what is dropped will
be specific to the WAF, so actually this is perfect territory for
finger-printing a network device.

Martin...


----------------------------------------------------------------------------
Join us on IRC: irc.freenode.net #webappsec

Have a question? Search The Web Security Mailing List Archives:
http://www.webappsec.org/lists/websecurity/archive/

Subscribe via RSS:
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]

Join WASC on LinkedIn
http://www.linkedin.com/e/gis/83336/4B20E4374DBA