LAYER 7 FOR SOA
Recognitions
• InfoWorld 100 2010
• OnDemand Top 100 Private
Companies in Cloud 2010
• International Business Awards
Distinguished Honoree 2010
• Gartner MQ Leader for SOA
Governance Sets 2009
• TechForum Top Security
Implementation 2009
• Gartner SOA Cool Vendor 2008
• SC Magazine Finalist 2006
Security Certifications
• FIPS in software and hardware
• EAL 4+ appliance
• STIG Assurance testing
• OASIS WS-Trust Interop
• WS-I Basic Security Profile editor
and interop
• W3C WS-Policy Interop
Contact Us
UK
Gainsborough House, 81 Oxford St
London, W1D 2EU
Phone: +44 (0) 207-903-5435
Fax: +44 (0) 207-903-5333
USA
1200 G Street, NW, Suite 800
Washington, DC 20005
Phone: +1-800-681-9377
Canada
1100 Melville Street, Suite 405
Vancouver, BC V6E 4A6
Phone Direct: +1-604-681-9377
Phone Toll Free: +1-800-681-9377
Fax: + 1-604-681-9387
Copyright ©2010 Layer 7 Technologies
Inc. All rights reserved. SecureSpan
and the Layer 7 Technologies design
mark are trademarks of Layer 7
Technologies Inc. All other trademarks
and copyrights are the property of their
respective owners.
With more than 150 customers across 6 continents, and successful partnerships with some of the
largest ISVs and resellers in the industry, Layer 7 Technologies is the leader in SOA and cloud security
and governance. Our award-winning SecureSpan™ family of XML Gateways feature sophisticated
runtime governance, enterprise-scale management and industry-leading XML security. Our
CloudSpan™ family enables enterprises and service providers to securely consume cloud services, as
well as protect and control their own applications deployed in public and private clouds. Founded in
2002, Layer 7 has a history of helping organizations address their security, visibility and governance
issues by enabling them to control, manage and adapt their Web services, no matter the deployment
model — in the enterprise or in the cloud.
Connecting & Protecting Services across the Extended Enterprise
The decomposition of applications into discrete services for simplified service oriented integration
both inside and outside the enterprise has become more commonplace over the past five years.
However, composing these services into functional business processes requires an ability to control
the parameters for how and when the services get connected without compromising security.
Layer 7 has a family of solutions designed for SOA that address the integration, security and
management issues associated with production SOA services that span the extended enterprise.
SecureSpan for SOA – X-Domain Security and Integration for SOA
The Layer 7 family of SecureSpan products addresses the integration, security and management
issues associated with protecting and connecting services that span the extended enterprise. By
implementing SecureSpan, enterprise architects can protect their services, optimize performance,
and control the way they get shared out.
• XML Accelerator: Offload XML translation and validation to dedicated hardware.
• API Data Screen: Protect SOAP and REST API’s from attack and misuse.
• XML Firewall: Implement identity and message-level SOA security.
• XML Networking Gateway: Mediate & govern service interactions across the extended
enterprise through policy.
• OSB Appliance: Extend OSB into the DMZ to facilitate secure, cross-domain deployments
involving Oracle Fusion products.
• Enterprise Service Manager: Simplify service promotion from development to test to production
to the cloud, while helping to monitor the health and performance of your SOA.
• Policy SDK: Extend the functionality of Layer 7’s products to handle specific protocols, unique
data types, and integrate with custom products.
• Enterprise Service Manager: Simplify service promotion from development to test to
production to the cloud, while helping to monitor the health and performance of your SOA.
• Policy SDK: Extend the functionality of Layer 7’s products to handle specific protocols, unique
data types, and integrate with custom products.
• XML VPN Client: Simplify federation and portal initiatives for SOA.
The SecureSpan family is available in a wide range of formats:
Software Virtual (VMware) Amazon Machine Image Hardware
Cross-Department SOA Integration Hub
Problem: cost-effectively integrate heterogeneous
by Red Hat
departments running on disparate application Distributed Transaction Platform

platforms (J2EE-based service

providers and consumers)
Centralized Transaction Platform
(Mainframe-based service

Solution: SecureSpan SOA Gateway provides providers and consumers)

SOA-based mediation between application services

Firewall

hosted on different platforms across internal data

centers; identity mapping between domains; and Partners Internet

integration to external partners

Results: using a centralized, policy-driven LDAP

SecureSpan gateway, the company can now

onboard partners and acquired divisions quicker;
share data and functionality more easily; and
respond faster to business change Centralized Transaction Platform Enterprise Resource Planning
(Office and .NET-based service
(SAP service
providers and consumers)
providers and consumers)

Corporate Web Services

SOA Governance
Client #1
Problem: required policy and identity
governance for their SOA which spanned
global datacenters and offices SAML

SAML

Solution: SecureSpan XML Firewall and

VPN Client provided an end-to-end way to XML VPN Client

manage policy and identity across global offices

0101010101010101
0101010101010101
0101010101010101
0101010101010101

Results: Enabled rapid on-boarding of offices Corporate LDAP Server

0101010101010101
0101010101010101
0101010101010101
0101010101010101
0101010101010101
0101010101010101
0101010101010101

without IT having to worry about implementing

Client #2
consistent policy and identity across global offices WS-MetadataExchange

and datacenters
of WS-Policy Documents

WS-Security

Client #3

Federated SOA Security

Problem: faced with an aging population
and escalating healthcare costs, the Internet
Patient
government needed to find a way to reduce Personal record lookup/
Grant physician access
overhead and administration costs
Solution: SecureSpan SOA Gateway
facilitated the creation of a decentralized,
0236 35184 30344 951
12/12
JANE DOE

Web Portal 0236 35184 30344 951

12/12
Application

JIM DOE
SmartCard

Application

SmartCard

federated SOA security environment Clinic Internet

that allows regional health providers and Internet Lab Services
Pathology record lookup
authorities to cost-effectively share patient Patient record lookup
Prescription lookup
information
0236 35184 30344 951
12/12
JANICE DOE

0236 35184 30344 951

12/12
Application

JOHN DOE
SmartCard

Application

SmartCard

Results: simplified access to patient records

Pharmacy
without the need for costly centralization or Registered Healthcare Providers
Hospital
compromising patient privacy
National Health Infrastructure