(August 20, 2003) - DataPower Technology, Inc., has announced Release 2.3 of firmware for the DataPower XS40 XML Security Gateway and the DataPower XA30 XML Accelerator, incorporating the first WebSphere MQ series protocol support in a network device, the first SOAP-based management interface for an XML-aware network device, as well as enhanced security features for non-repudiation and XML denial of service (XDoS) protection. In addition, Release 2.3 includes enhanced XML forensics, message velocity checking, and invalid message capture. DataPower's firmware Release 2.3 advances the XS40's and XA35's positions as the best of a new class of network devices that are fully aware of the XML, SOAP, and Web services messages and efficiently apply intelligent acceleration, security, and management services across the network.

Release 2.3 supports critical enterprise features including:

First XML Web Services Management Interface - programmatically provisioning, configuration, or monitoring of XAN devices is now easy via SOAP-based API which conforms to the WS-I Basic Profile 1.0 specification. This interface makes it possible to dynamically respond to security events, automate management and integrate with existing management systems.

First integration with WebSphere MQ series extends beyond HTTP to deliver reliable wirespeed Web services security and intelligent acceleration for XML and SOAP messages traveling on top of IBM's MQ protocol. Among other benefits, this enables customers the ability to deploy a unified XML security solution across stable back-end systems and external Web Services. The integration is available immediately as part of Release 2.3.

"XML Forensics" Control & Enhanced Non-repudiation - all transactions can be logged and all logs are digitally signed and optionally encrypted. The messages themselves can be protected by XML digital signature, secure timestamps and XML encryption. This ensures a legally binding audit trail that can be used as evidence in prosecuting attackers or for business disputes arising from electronic transactions.

Message Velocity Checking & Monitoring - the velocity of messages from individual sources can be automatically controlled and limited to help ensure appropriate levels of service and to protect against XML denial of service (XDoS) attacks. Based on source location, destination, "time to process" or other defined parameter, a stream of XML/SOAP/Web service messages can be monitored to detect changes in service or abnormalities at which point message rates can then be limited or halted for advanced application server protection.

Invalid Message Capture - XML/SOAP messages that are not valid or well formed are captured, logged, and alerted to assigned personnel. Like the serious PC virus control problems seen today as exemplified by the recent Blaster Worm, malicious Web Service and XML RPC exploits will similarly increase along with accidental increases in invalid SOAP messages on the network. Advancing DataPower's security features for schema validation and message reporting, Invalid Message Capture enables the entire invalid messages to be captured and stored for manual intervention and analysis.

CIO, CTO & Developer Resources