ONLY Web Application Firewall blocks attacks that bypass network firewalls and IPS devices

dotDefender
installed on a web server as a module for Apache and as an ISAPI filter
for IIS

dotDefender is based on three powerful web application security engines:

dotDefender protects your internal web application and authorized access to applications according the security profile of each interface and user

