nevisProxy is a secure reverse proxy with integrated web application firewall (WAF). It acts as a central upstream entry point for web traffic to integrated online applications. nevisProxy controls user access and protects sensitive data, applications, services, and systems from internal and external threats.

Features and Tasks:

• Protection against denial-of-service attacks
• SSL termination (encryption and acceleration)
• Session and timeout handling (single session)
• SSO (single signon)
• Initialization of multi-step authentication
• Authentication in cooperation with nevisAuth
• Propagation of user identities incl. additional information (roles) in secure token (SAML, JWT, Nevis SecToken, HTTP Header etc.)
• Role-based authorization
• Cookie caching
• Renegotiation of client session association
• Caching and data compression
• Content inspection and validation (HTML, XML, JSON etc.)
• Input validation (black- and whitelists with self-learning)
• Virtual patching enables rapid reaction in case of serious security threats
• URL signing and encryption