Airlock Gateway 8.3

Airlock Anomaly Shield – With 3x Higher Anomaly Detection Rate

Airlock Anomaly Shield benefits from advancements in machine learning models, improved training techniques, and enhanced safety measures. This allows it to handle rare events even more effectively. Thanks to these improvements, the anomaly detection rate has increased by 300%, while simultaneously reducing false positive rates.

Additionally, the efficiency of the Anomaly Shield's model training has been optimized, leading to lower memory consumption and reduced CPU usage.

New Kibana dashboards now provide more detailed insights into session statistics and IP aggregates. Thanks to new heatmaps, mappings with the highest number of anomalies are now visibly highlighted. In addition, lists of the top offenders and likely false positives provide valuable insights that help operations teams better understand potential attacks.

Improved Back-End Protection – More Control, Less Risk

Airlock Gateway 8.3 introduces new features to further enhance the availability of web applications and APIs, ensuring that administrators and application managers don't have to worry about outages or attacks.

Enhanced Protection Against DoS Attacks: You can now configure different rate limits within a mapping. This gives you the ability to make granular settings – all while maintaining a clear overview.

Overload Prevention: This new feature limits the number of HTTP requests per session within a specified time frame, protecting your applications from overload due to faulty clients or repeated requests from impatient users.

More Precise Access Control with Optimized Admin Roles

With this new release, we have revised and expanded the predefined roles in the Airlock Gateway Configuration Center. The newly defined roles allow for even more precise restriction of access.

Optimized Roles: Existing roles have been adjusted to better cover the different activities of users.

New Roles for Specific Use Cases: These new predefined roles grant only the minimum necessary permissions while still enabling specific use cases. This increases security and efficiency when configuring Airlock Gateway.

Increased Security: Thanks to the precise assignment of permissions, the risk of unauthorized access is significantly reduced. The new predefined roles ensure that administrators only have access to the functions they really need.

ACME Services – Automated Certificate Management for Enhanced Security

The ACME protocol (Automatic Certificate Management Environment) automates the issuance, renewal, and management of certificates. This not only significantly reduces administrative effort but also ensures that your certificates are always up-to-date and secure.

Predefined Let's Encrypt configurations are ready to use immediately. In addition, custom ACME services can be individually configured to efficiently meet specific requirements.

Automatic Certificate Management: With ACME, expired certificates are a thing of the past, and certificates are renewed in a timely manner, minimizing security risks.

Increased Security: Continuous certificate updates drastically reduce the risk of security vulnerabilities. Your web applications remain optimally protected without the need for manual intervention.

Efficiency and Reliability: Administrators can focus on more important tasks while ACME ensures security in the background. ACME services provide a reliable and efficient solution for certificate management.

Future-proof: By supporting ACME services, you are well-prepared for the future. The automation and security offered by the ACME protocol make it an indispensable component for modern web applications.

Hardened Filter Rules Thanks to Bug Bounties

Last but not least, our Airlock Bug Bounty Program, successfully running since 2020, has led to numerous security improvements, which are now included in this release. We thank the white-hat hackers who share their findings with us. Learn more about the Airlock Bug Bounty Program here.

Updating is easy

Airlock Gateway 8.3 is now available on the Airlock Techzone. Updating to this minor version requires no manual adjustments – your existing configuration can be easily migrated and activated. A detailed overview of all updates and fixes can be found in the release notes.