TR7 Secure - ADC + AAM + WAAP (PAYG) - 50mbps

TR7 Secure - ADC + AAM + WAAP (PAYG)

TR7 Secure delivers enterprise Layer 4/7 load balancing (ADC) with Application Access Management (AAM) and advanced Web Application and API Protection (WAAP) — deep, per-path defense against the OWASP Top 10 and emerging threats.

Built natively for Azure (automatic IP via Azure IMDS); configure all policies through a visual interface — no scripting. Pay-as-you-go, licensed by throughput tier.

Application Delivery Controller (ADC)

• Layer 4/7 distribution with multiple algorithms (Round Robin, Weighted, Least Connection, Source / URI / Header Hash)
• SSL offload, bridge, and passthrough; SNI; automatic ACME (Let's Encrypt) renewal
• Content switching by URL, header, or cookie; HTTP compression and caching; health checks across HTTP/S, TCP, DNS, FTP, LDAP, Oracle, and scripted scenarios
• Rate limiting, connection limits, bandwidth control, QoS, and sensitive-data masking

Built-in Security

• Bot Protection (multi-category) with block, redirect, or custom-content actions
• Layer 4 and Layer 7 DoS/DDoS mitigation with Quarantine action
• IP Intelligence reputation-based filtering of malicious sources

Reporting and SIEM

• On-demand or scheduled reports, plus SIEM integration with fully customizable export

Application Access Management (AAM)

• Authentication: form-based login, MFA, SSO, SAML 2.0, OAuth / OpenID Connect
• Branded login with customizable page templates and dictionaries
• Brute-force protection: account lockout, Captcha, session controls
• Bot protection at the authentication layer
• Local databases plus external providers (AD, LDAP, RADIUS)
• Action profiles, conditional access, and per-URL access control

Web Application and API Protection (WAAP)

• Per-path inspection: Query, JSON, XML, Form, Raw body
• OWASP protection levels (Elementary, Normal, Tight, Very Tight, Aggressive) plus custom and advanced built-in signatures
• Positive security model with adaptive learning: incoming parameters and their allowed value ranges (min/max) auto-built from real traffic, editable manually anytime; combined with signature-based (negative security) defense for layered protection
• Three-stage rollout: Learning → Monitor (eliminate false positives) → Block
• Blocked-request forensics with reason and source IP, teachable and tracked by unique-ID; WAF logs never deleted, always retained on the device
• Structure and argument checks, blacklist protection, static-content whitelisting, customizable blocking page; online / offline rule updates

Every plan includes a 30-day free trial. Other plans and offers will be added soon.