Re: [mod-security-users] Forrester evaluation of web application firewalls

[Ivan R. <iva...@gm...>]

On 7/3/06, Tom Anderson <tan...@oa...> wrote:
> Ivan Ristic wrote:
> > The obvious problems with ModSecurity is the lack of a proper (read:
> > GUI) management interface, and they have rightly pointed that out.
> > Once we catch up with the user interface (which I expect to happen
> > within 6-8 months) I strongly believe we will be a strong competitor
> > for the leadership.
>
> I don't think that GUIs belong on a server

And I don't intend to put them there. The GUI would be implemented in
the central (management) console.


>, and I certainly wouldn't
> call the lack of such a "problem"

There are some things that are difficult to do from the command line.
Forensic research is one of them. Automated policy development is
another. My approach is to have both text-based configuration and a
GUI. Also, it is very difficult to sell a product without a GUI.


> P.S. The Forrester links did not work.

They do for me.

-- 
Ivan Ristic, Technical Director
Thinking Stone, http://www.thinkingstone.com
ModSecurity: Open source Web Application Firewall