Imperva unveils Cloud Architecture

Imperva has released an integrated architecture for managing access to cloud data and applications that delivers high levels of security, performance and availability. The unified architecture, consisting of the Imperva Incapsula Network and Imperva Skyfence Cloud Gateway, a Cloud Access Security Broker (CASB), offers customers a single framework for safe and productive use of cloud applications.

According to a new Gartner report, CASB proxies can “introduce the potential for a single point of failure and impact on application latency.” The report adds that “CASBs are on-premises, or cloud-based, security policy enforcement points placed between cloud service consumers and cloud service providers to combine and interject enterprise security policies as the cloud-based resources are accessed.”

“Our vision is to help organizations protect their data and applications wherever they live,” said Mark Kraynak, Chief Product Officer, Imperva. “As our customers move their business productivity apps to the cloud, Imperva offers an integrated platform that sets a high bar for a secure CASB while also increasing the speed of web applications to improve the user experience.”

Only Skyfence gives organizations all the power of a proxy – to inspect and manage user traffic to cloud apps – with the security and performance of a world class web application security and DDoS mitigation service to protect the CASB proxy infrastructure against application and DDoS attacks and promote the acceleration and availability to employees of SaaS apps. Skyfence customers can now benefit from enhanced:
Performance - Skyfence customers benefit from a globally distributed CDN that delivers full site acceleration through intelligent caching and content optimization tools. The Incapsula application-aware CDN dynamically profiles Web and application resources and identifies both dynamic and static cacheable content to accelerate page rendering and minimize latency for the end user.
Security - While CASB proxies offer many advantages to protect cloud app users, they are vulnerable to application and infrastructure attacks. Skyfence proxies are protected by the built-in Incapsula Web Application Firewall, DDoS capabilities and advanced bot classification technologies.
Availability – As a globally distributed network of more than 25 data centers worldwide, the Incapsula CDN protects and accelerates over 100,000 web-based apps and resources. Skyfence customers can enjoy the proven benefits of a highly available cloud delivery network ensuring uptime and cloud access are maximized.

Skyfence Cloud Gateway is a cloud access security broker that provides visibility and control over sanctioned and unsanctioned cloud apps. With Skyfence, organizations can discover SaaS applications in use and assess related risks, enforce controls to protect against account-centric threats, meet compliance requirements, and protect user accounts and data in the cloud.

Incapsula dynamically profiles website resources and identifies cacheable content, both dynamic and static. In addition, Incapsula invokes dynamic profiling and frequency analysis so that the most frequently accessed resources are identified and fetched directly from memory.