Abstract: A request for a confidential web page, and in response, can transmit an HTML code snippet to a browser running on a network device coupled to the data communication network to determine whether JavaScript is enabled locally at the network device. The confidential web page can be, for example, a log in, or other sensitive or personal data, vulnerable to browser-based intrusions. Responsive to detecting that JavaScript has been disabled, restricts subsequent communication by the network device, wherein the application firewall requires enabling of JavaScript to continue to the confidential web page. On the other hand, responsive to detecting that JavaScript has not been disabled, allowing the request for the confidential web page to proceed.

Abstract: A true transparent proxy for a web application firewall is provided. Granular network security policies are applied on a per web application basis using unique SSL inspection certificates for web applications sharing a common IP address.

Abstract: Systems and methods for an improved HA cluster architecture that provides for seamless failover while also maintaining full processing capacity are provided. According to one embodiment, each member of a hybrid HA cluster of reverse proxy network security devices is configured to operate in an active mode or in a backup mode. A primary member of a set of active members of the cluster receives and processes network traffic. The cluster detects existence of a failure scenario of multiple potential failure scenarios involving an active member, including (i) failure of the primary member; and (ii) failure of a non-primary member. Responsive to detecting the existence of the failure scenario, seamlessly failing over from the failed active member to a backup member of a set of backup members of the cluster by causing the backup member to join the set of active members by placing it in the active mode.

Abstract: Systems and methods for an improved HA cluster architecture that provides for seamless failover while also maintaining full processing capacity are provided. According to one embodiment, each member of a hybrid HA cluster of reverse proxy network security devices is configured to operate in an active mode or in a backup mode. A primary member of a set of active members of the cluster receives and processes network traffic. The cluster detects existence of a failure scenario of multiple potential failure scenarios involving an active member, including (i) failure of the primary member; and (ii) failure of a non-primary member. Responsive to detecting the existence of the failure scenario, seamlessly failing over from the failed active member to a backup member of a set of backup members of the cluster by causing the backup member to join the set of active members by placing it in the active mode.