Usually, unlike stateful-packet filtering firewalls for dynamic data masking, application-layer firewalls are always aware of certain applications, for instance the Web, SQL, and e-mail. Also, these multi-talented firewalls prohibit direct connections from the Internet to your servers by assuming the proxy role between the applications you serve (Web, E-mail, FTP, etc.) to the rest of the wired world.

Decisions based on protocol Enterprise networks can no longer allow or deny traffic based on protocol alone. Now that exploits through common and necessary protocols (HTTP, SMTP, etc…) have become frequent. They must employ firewalls for dynamic data masking capable of inspecting protocol data in the TCP header.

Application-layer firewalls usually act as both client and server, by ‘proxying’ the data between …

Read More →


DataSunrise data masking restricts sensitive data within a database from exposure to non-privileged users. This prevention of unauthorized access to sensitive data is done by creating a structurally similar but inauthentic data to provide it for some external services. This is to protect the sensitive data from being exposed to the wrong people, it maintain the security of the data within the database.

In proxy mode DataSunrise is able to monitor SQL statements that database clients send to a database and hide original data with random or predefined data. DataSunrise supports data masking in proxy mode only. It evaluates each SQL statement by using the list of rules in order or rule priority. DataSunrise then executes the first rule …

Read More →