How To Choose An Application-Level Firewall

Here's how in my article on TechTarget's SearchSecurity web site last week. I explained how the issue is tied up with complying with Section 6.6 of PCI.

Section 6.6, which comes into force as a requirement on June 30, says that companies processing credit cards must either conduct a code review or intall a web application firewall.

Now, we all know, application security isn't an either-or proposition. And, unfortunately, some companies think the easy way out is to just buy an application firewall.

Read the article for more details.