Incapsula Enteprise for Gold Security™

Secure and accelerate the speed of your website using advanced, cloud-based services

What is Incapsula Enterprise?

Our trusted partner, Incapsula Enterprise, have provided us with a customised solution, a cloud-based service offering 24/7 protection against all DDoS attacks without the need for multi-gigabit internet connections or any additional hardware. Using Incapsula Enterprise eliminates the setup and overhead costs associated with over-provisioning and deployment of additional on-premise appliances at the very top of the page.

What does it offer?Find out the different ways we can monitor your business online

Optimum website security

Secure your website against existing and emerging application-level threats with a PCI-certified web application firewall and cutting-edge bot protection.

DDoS protection – 24/7

Leveraging the CDN and a dedicated 24/7 NOC means no disruption to the smooth running of your business. Use the service to fortify your site against network, application and DNS targeted DDoS attacks.

High-capacity CDN and optimiser

Based on a globally distributed network of data centres, the application-aware CDN delivers full site acceleration through intelligent caching and content optimisation tools.

Load balancing and failover

Cloud-based Layer 7 load balancing, data centre failover and global server load balancing with real time health monitoring and notifications ensures high-availability and performance.

How do I benefit?Find out the different ways we can monitor your business online

null

DDoS protection

Constant protection ensures automatic detection and mitigation of DDoS attacks with clear Identification and differentiation between humans, good bots, bad bots, AJAX and APIs. It includes CDN for website performance and security enhancement and transparent mitigation with extremely low false positives – below 0.01%.
null

DDoS bot detection

Incapsula Enterprise’s renowned traffic inspection technology is proven to accurately identify malicious bots used for Layer 7 DDoS attacks. It relies on a combination of behavioural and reputational analysis, rate-based heuristics and a series of progressive challenges. It can quickly weed out even the most sophisticated DDoS bots with no impact to regular human visitors.
null

Comprehensive protection

Website DDoS protection is seamlessly compatible with other Incapsula security solutions, including the Name Server DDoS Protection and Infrastructure Protection services. Together, these solutions provide Incapsula customers with the most robust DDoS offering on the market.
null

No disruption

Incapsula Enterprise not only protects websites from complete denial-of-service, but also from disruptions related to DDoS attacks, including mitigating false positives. It offers transparent mitigation with less than 1% false positives, and without degrading the normal user experience in any way. This allows customers to enjoy true DDoS protection, even from lengthy attacks, without ever disrupting business performance.
null

High-capacity network

As network DDoS attacks, such as SYN flood and DNS amplifications, continue to grow in size, your organisation needs robust network capacity to mitigate any threat that might come your way. Incapsula Enterprise’s global network of data centres offers 700 plus Gbps of aggregate scrubbing capacity, enabling it to easily block even the largest DDoS attacks.
null

IP masking

Incapsula Enterprise acts as a secure proxy, masking the actual IPs of the origin server to prevent direct-to-IP DDoS attacks. For added security, operators can also choose to block incoming traffic from all non-Incapsula IPs, ensuring that all visitors are inspected on their way to the origin.
null

Cloud-based

Incapsula Enterprise Website DDoS Protection uses DNS redirection to persistently reroute website traffic (HTTP/HTTPS) through the Incapsula Enterprise network. Once traffic enters the Incapsula Enterprise network, it is subject to progressively stringent layers of inspection.

Using sophisticated security rules and challenges, Incapsula Enterprise ensures that DDoS attack traffic is identified and filtered out, while allowing legitimate traffic to flow unhindered to protected websites.

At the same time, Incapsula Enterprise also masks the origin server IPs to counter direct-to-IP attacks. Since the service leverages the Incapsula Enterprise global CDN, no latency is introduced as web traffic passes through our network. In fact, in many cases, the user experience is enhanced.

How does it work?

A global CDN routes all traffic to your website and web applications, intelligently profiling this traffic in real-time to block all types of application layer threats, as well as mitigating DDoS attacks.

Meanwhile, outgoing traffic is accelerated and optimised with advanced caching and optimisation techniques, keeping welcome visitors speeding through.

The Imperva Incapsula Enterprise for Gold Security Website DDoS Protection solution is an always-on, cloud-based DDoS mitigation service which automatically detects and mitigates all types of DDoS attacks launched at websites and web applications.

FAQ

What’s the benefit of using Incapsula Enterprise?

Website Security:

protect your website from all OWASP threats, from scrapers and spammers to sophisticated injection and XSS attacks

Website Performance:

On average, websites using Incapsula’s CDN are 50% faster and consume 40%-70% less bandwidth.

Analytics and Monitoring:

real time analytics for website traffic, performance and threats

Simple PCI Compliance:

with Incapsula’s PCI-Certified Web Application Firewall.

DDoS Protection:

Incapsula delivers immediate and comprehensive protection for both network (Layers 3 and 4), Application (Layer 7) and DNS-targeted DDoS attacks.

Will Incapsula make my site faster?

YES! Incapsula has a distributed network of data centers (POPs) that ensures that every user and website are serviced by the closest POP. This is the same principal technology that is used by most of the large websites to accelerate the delivery of their content through a Content Delivery Network (CDN). Furthermore, Incapsula will make your site run faster and consume less computing and bandwidth resources by caching site data and applying other acceleration techniques.

Where are Incapsula’s Data Centers located?

Incapsula has a global network of high powered servers. To see a map of Incapsula’s data centers, click here.

My website has SSL. Can Incapsula support it?

YES. When adding an SSL site, Incapsula will lead you through a simple process of supporting SSL.

Incapsula will automatically identify when websites that support SSL traffic (HTTPS) are added to the service.

In order to enable support for SSL traffic, Incapsula generates a certificate for your domain that will be hosted on its servers. In this process you are requested to approve the creation of such a certificate by Incapsula’s SSL certificate provider.

What types of threats does Incapsula protect against?

Incapsula’s enterprise-grade Web Application Firewall ensures that your website or application is always protected against any type of Application Layer hacking attempt. This includes OWASP top 10 threats such as SQL injection, cross site scripting, illegal resource access and remote file inclusion. The comprehensive DDoS Protection service secures applications and infrastructure from any type of DDoS attack, targeting any type of service.

Does Incapsula affect Google Analytics?

NO. Incapsula will not affect Google Analytics. Google Analytics works by inserting a piece of JavaScript into your web pages. This JavaScript interacts with the Google servers. Since Incapsula does not come between Google servers and your visitor, we have no effect on Google Analytics.

How does Incapsula optimize website content?

Dynamic content caching

Incapsula caches web site content on its proxies in order to return resources faster to users and reduce page load time, bandwidth and server load. Incapsula does not only cache static content but can also identify content dynamically generated by the application, which can be cached while it remains unchanged.

Compression

An average website page is 100KB to 500KB, depending on its content, structure, functionality and the resources it contains. For content-rich applications, the simple task of transferring the page to the browser can take a long time. Common web servers and browsers support content compression. Configuring the compression of resources on your web server requires complicated settings, technical expertise, and substantial processing power from your web server. Incapsula compresses this content for you, even when sent uncompressed from your server.

Minification

Minification is the process of removing all unnecessary characters from source code, without changing its functionality. These unnecessary characters usually include white spaces, new line characters and comments, often used to add readability to the code but not required for its execution. By removing these characters, Incapsula minimizes your website’s size, making it lighter and reducing loading time.