At the entry
Control inbound services and suspicious probing at protected boundaries.

ENTERPRISES / SECURE MORE THAN THE PERIMETER
ESBA is designed for organizations that need deliberate protection at multiple points in their network. Plan inline coverage around the applications, data sources, and traffic boundaries that matter to your business.
WHERE PROTECTION BELONGS
A deployment can protect a selected network boundary; multiple appliances can be introduced where separate environments, traffic paths, or policy domains require independent coverage.
Control inbound services and suspicious probing at protected boundaries.
Govern the traffic passing between protected environments, namespaces, and data-center connections.
Restrict outbound paths using explicit policy and approved service/destination exceptions.
OPERATIONAL CHOICE
Choose the hosting model best suited to your AWS topology and internal operational model.
ESBA provisions the appliance infrastructure based on discovery and placement decisions. Your team controls security policies and approved updates.
Run the appliance in your own dedicated EC2 instance with guided deployment and a customer-managed cutover.
Use the ESBA Customer Portal and appliance GUI for licensing, updates, monitoring and approved policy configuration.