Hi Serhat,

With that list of requirements it looks like what you're after is an ESB not a security gateway. SOAE doesn't have explicit support for ReliableMessaging, Transaction or Notification although the workflow / policy is flexible enough to implement these if required. We have SecureConversation as a roadmap feature.

For documentation go to intel.com/go/identity for documentation - Expressway Service Gateway

Here's a list of supported standards:

XML Firewall Threat Prevention Denial of Service Protection, XML Limit Checking, SQL Injection, DTD Checking, XPath Injection, Forbidden RegEx
Scan, Malformed XML Attack, XML Bomb Attack, Schema Poisoning Attack

Authentication and Authorization Local X.509 certificate and username/ password authentication, external LDAP or Active Directory authentication
Username/Password X.509 and SAML token authentication, custom XML-based credentials, HTTP basic auth, credential
mapping
Computer Associates SiteMinder, Oracle Access Manager
Certificate and Key Management, integrated X.509 certificate path validation support
X.509 certificate key usage checking support, certificate revocation list (CRL) checking

Open Web Services Security Standards OASIS WS-Security 1.0/1.1, OASIS X.509, Username and SAML profiles, W3C XML encryption and XML signatures,
Support for non-SOAP-based XML security, WS-I BSP 1.0/1.1, SOAP with Attachments, MTOM

Transport Layer Security Support for multiple SSL identities and mutual authentication SSL v3 and Transport Layer Security v1 acceleration,
origination, and termination

Cryptographic Support Optional Cryptographic acceleration of private key, symmetric key, and hashing operations
Supports DES, 3DES, AES, RSA v1.5, RSA-OAEP, SHA-1 and SHA-256

Transport Protocols HTTP(S) 1.0, 1.1, JMS, FTP, MLLP, File, Raw TCP, Custom Protocol Support

Service Mediation High performance service mediation engine
Secure SOAP, REST or custom service mediation within the datacenter or across the Internet
Supports simple proxy or complex service mediation cases

Service Governance High performance run-time policy enforcement for XML well-formed checking, schema validation, XML transformation
(XSLT), content conversion (Non-XML support), content filtering (XPath), XML Security, WS-Security and
content-based routing for SOAP, REST, or POX (Plain-Old-XML) data
Automatic policy updating and enforcement