|
|||||||||
|
|
|||||||||||||
Q. Who is the DXP designed for?
A. The DXP is designed for software vendors or system integrators who wish to deliver their product in appliance format. The DXP or Dajeil eXecution Platform consists of a high performance 1 U server, Dajeil's DH15K XML/WSS/SSL acceleration card, hardened linux, remote management and upgrade tools all of which can be branded to meet customer requirements. Q. How easy is it to deploy the DXP?
A. The DXP includes many features designed to minimize the tasks of installation and ongoing maintenance. Since it is an appliance, no software needs to be installed in order to deploy the device. All policies can be imported and exported as XML files, which minimizes the time taken to replicate policies across multiple devices, or to move from staging to production usage. Certificates and private keys, necessary for many XML security functions, may be generated on-board. The device has a "Deny by Default" policy set, in order to detect and block any unauthorized deployments of Web Services. Policies can be re-applied across multiple application endpoints using simple drop-down menus. Q. How secure is the DXP itself?
A. The DXP includes a secure operating system which has no extraneous services available. The device is hardened so that it is resistant to attack at the network level, as well as the XML level. Q. How does the DXP perform audit and reporting?
A. The DXP monitors the performance of the XML applications which it protects. Service Level Agreement thresholds, such as One-Second-Response guarantees, may be enforced at the DXP. A real-time monitoring console is provided. Alerts may be sent to a wide variety of network monitoring applications, via SNMP and other protocols. XML activity is logged and the logs may optionally be signed. A Web-based interface is provided to search the log archives. Q. How does the DXP perform XML-level networking?
A. The DXP performs XML routing and service virtualization. Service virtualization allows XML application endpoints to be defined at the XML Gateway, but then routed to differently-named local resources behind the gateway. In this way, if the local resources malfunction or change, the DXP device masks this. Q. How does the DPX address the performance challenges of XML security?
A. Dajeil's core XML security engine is integrated into the DXP. This engine, developed since 1999 and including optimized performance-tuned implementations of XML Encryption and XML Signature, accelerates the primitives involved in Web Services security. Hardware acceleration is also used to accelerate the cryptography primitives, including public and private key cryptography which is widely used in XML security. Q. Does the DXP also protect "plain XML" applications which do not use SOAP?
A. The DXP provides protection for all three classes of XML applications: SOAP-based Web Services, "plain XML" applications which do not use SOAP, and "REST style" applications which are invoked using HTTP GET. The device supports many XML dialects, including ACORD, FIXML, and ebXML. Q. How does the DXP protect me from changing standards?
A. Dajeil realises that standards in the area of XML security are changing, and therefore provides regular updates to its products. Since its founding in 2003, Dajeil has been at the forefront of standards adoption. Dajeil's XML processing engine is driven by 400 rules which are derived directly from the XML specification.
|
|