ACE Web Application firewal & Architecture

[darwintobardelgado]

Hi,

Please I need your help. I'm configuring a cisco ACE XML solution, but I don't understand what are differences between the appliance's license.

1. Can I delploy ACE Web filtering in one appliance?.

2. What type of license I need if I want to protect of Cross-scripting, HTTP parameter manipulation, Protocol compliance, etc attacks?

3. Can I deploy a solution only with an Web Gateway? (without an ACE Manager).

Thank you for your help.

Best regards,

DT.

[jim_berlow]

I'll tell you what I know (I'm still learning myself).

1. Yes this can be done. Setup the AXG to run in stand-alone mode (basically the one unit serves as both manager and gateway).

2. Don't know the answer to this one yet so I can't help with this question.

3. See #1. A single unit can run as both a manager and a gateway, but the manager is required. FWIW...most of the cost of the manager is the licensing so you won't save that much money by loading it all on one box.

I hope that helps,

Jim

[huangedmc]

You don't need the full blown AXG license, but just the Web App Firewall license.