Dell SMA 200 Administration Manual page 70

How are Insecure Storage and Communications Prevented?
Insecure Cryptographic Storage and Insecure Communications are prevented by encrypting keys and passwords
wherever necessary, and by using SSL encryption to encrypt data between the Web Application Firewall and the
client. Secure Mobile Access also supports HTTPS with the backend Web server.
How is Access to Restricted URLs Prevented?
Secure Mobile Access supports access policies based on host, subnet, protocol, URL path, and port to allow or
deny access to Web sites. These policies can be configured globally or for users and groups.
How are Slowloris Attacks Prevented?
Slowloris attacks can be prevented if there is an upstream device, such as an SMA/SRA security appliance, that
limits, buffers, or proxies HTTP requests. Web Application Firewall uses a rate-limiter to thwart Slowloris HTTP
Denial of Service attacks.
What Type of PCI Compliance Reports Are Available?
Payment Card Industry Data Security Standard (PCI DSS) 6.5 (Version 2.0) and PCI DSS 6.6 (Version 1.2) are
covered in PCI reporting. The administrator can configure Web Application Firewall to satisfy these PCI
requirements.
You can generate and download the PCI report file on the Web Application Firewall > Status page.
NOTE: This is not an official PCI Compliance report. It is for your self-assessment only.
In the report cover, the following information is displayed:
• The model, serial number, and firmware version of the appliance
• The user name of the person who downloaded the report, displayed as the author of the report
• Time when the report was generated
The following is an example:
Two tables are dynamically generated in the PCI compliance report to display the status of each PCI
requirement. The format of the table is shown in the example that follows:
The first column describes the PCI requirement.
Dell SonicWALL Secure Mobile Access 8.5
Administration Guide
70