hey guys..
How good is CSRFguard? i am trying to configure my web application which is based on Tomcat server with CSRFGuard to protect it against CSRF attacks.. but not sure how good is this solution?
had anyone experienced CSRFguard?? if positive, please point me to some place where i can get a right configuration of CSRFGuard.
and.. is this this being continuously supported by owasp?

Congrats dude..

Me too cleared GWAPT last month and was very happy about it.
i felt i have shelled out a bomb to SANS for sec542.. I now wanted to take GPEN. Can anyone suggest me the right course to take for taking this certification. plzz do not point me to SANS again.