Layer 7 Technologies today announced that it is working with Oracle to provide flexible, end-to-end security for application integrations based on XML Web services.
Oracle Identity Management combines with Layer 7’s flexible XML firewalling and security coordination capabilities to enable security solutions that fully span Web services deployments. Unlike traditional code-centric based approaches, this gives customers the freedom to deploy standards-based, interoperable Web services integrations without compromising security or flexibility.
Comprehensive Web services provisioning, deployment and identity management capabilities are provided by Oracle Application Server 10g and Oracle Database 10g. Layer 7’s SecureSpan Solution provides the ability to layer service level access control, encryption and threat protection across Oracle-based solutions in deployment. The combination offers customers the ability to seamlessly integrate their database, PKI, identity management and provisioning technology into their Web services. The result is a faster, more secure and flexible Web services implementation.
Customers deploying the combined solution are already experiencing tangible benefits. In an effort to streamline court proceedings, the BC Ministry of Attorney General had been tasked with making an electronic court proceedings system available to a broader set of users. Both internal users and the general public needed access to extremely confidential information distributed across a variety of different systems. “By combining Layer 7 and Oracle’s technology we were able to put our next generation court system into production in a fraction of the time and cost of a comparable middleware-based deployment”, said Robert McDonald, Director of Application Management Services. “Moreover we were able to do this while ensuring we enforce the fine-grained message level security and auditing essential for the sensitive information we are providing.”
The SecureSpan Solution
The Layer 7 SecureSpan Solution consists of three key components –
The SecureSpan Gateway acts an XML firewall to protect services extending across corporate security zones or to other business partners; the SecureSpan Manager is used to define highly-granular security policies enforced by the Gateway; the SecureSpan Agent works seamlessly with the Gateway to automatically extend and coordinate security policies to client-side applications without additional programming.
