iboss SWG Web Content Management Solution Overview
Ensure Regulatory Compliance: CIPA and HIPAA
Issues: It’s become increasingly more difficult to manage networks by filtering URLs. With the emergence of Web 2.0 and HTTPS, as well as the onslaught of mobile devices and BYOD which have become a big part of day-to-day operations, it’s become imperative to secure networks beyond simply the wired devices. In addition, generic reporting of URL access fails to provide complete insight on the network resources utilized, and it lacks the ability to pinpoint the latest threats.
Solution: To address the “new Web,” iboss SWG Web Security secures all aspects of Internet traffic including web filtering, SSL access, applications, bandwidth throttling/QoS, on/off-premise mobile security, and BYOD management tools all of which are combined with best-of-breed network threat and reporting dashboards in one solution. This comprehensive security suite gives you the tools you need to secure all aspects of Internet traffic. By inspecting across 65,535 ports, iboss SWG tracks and manages applications such as Web Ex and Google Docs, including SSL on nonstandard ports while providing unmatched network insight. All iboss SWG filters include the iboss SWG Threat and Event Reporter for unmatched packet level insight.
iboss SWG Web Security Combines:
- Web Security (HTTP/S)
- Scan Inside SSL
- Layer 7 Application Management DPI/Heuristics/Signatures
- BYOD Management- Authentication, Bandwidth, High Risk Quarantine
- Mobile Security - On/Off Premise Security
- Bandwidth Throttling and QoS
- Integrated SWG Threat & Event Reporter
Application, HTTPS, Web 2.0
Web 2.0 introduced the need to protect traffic outside standard Port 80 and 443. New applications such as torrents, annonymizers, and chat applications such as Yahoo and Google Chat must use nonstandard ports for communication. Securing these ports ensures network compliance and reduces threat exposure while enforcing the organization’s acceptable use policies (AUP).
Identify Threats & Report Traffic
iboss SWG Web Security contains the powerful iboss SWG Enterprise Forensic Reporter to provide best-of-breed network reporting, forensic search abilities, and drill-down detail of all network traffic. iboss SWG Forensic Reporter provides dynamic real-time threat dashboards to pinpoint threats, bandwidth usage, and user activity. It also includes the Bandwidth Plotter, so administrators can track bandwidth consumption through a bandwidth plotter and heat map charts, plus search functions to track individual connections. The proprietary Global Geotagging Map over IP provides live visual insight on where network traffic is originating from, across the globe.
Protect Network Resources
iboss Bandwidth Management delivers control and visibility of network traffic. Flexible policies can be applied to throttle non-critical traffic during peak hours while ensuring that network-critical access is retained. With its real-time bandwidth logs and comprehensive data reports, IT can identify the area of bandwidth usage. Advanced controls allow policies to be set by predefined categories, domain, IP, or TCP/UDP and then applied to different groups. Management is refreshingly seamless and simple.
Social Media Content Management
Expansive social media management options provide “clean” access to YouTube, Google Management Suite and both their services. They also offer Google Clean Image Search and page-content control for social media sites.
- Threat Management
- HTTP/S filtering
- Signature and Heuristic Application Filtering
- Dynamic Proxy Detection
- Secure across all 65,535 ports, including all protocols
- Platform
- Secure Hardened OS
- Standards-based Fail-Over
- Available Fail-Safe Bypass Port
- Configuration and Deployment
- Full Throughput Capabilities
- High Performance Transparent Inline Filtering (Not Proxy)
- Explicit Proxy Mode
- Inline Proxy Mode
- Switch With Multi-Link Trunking (VLAN Trunking Support)
- Hybrid Mode (Fixed Filtering, NTLM, and Proxy Authentication)
- Software Free Installation
- Operating System Independent
- Web Browser Independent
- Authentication
- Single Sign-On Active Directory, LDAP and NTLM Integration
- Open Directory, eDirectory Open LDAP Integration
- Transparent Authentication for Apple/Mac Devices (Hook)
- Forced Authentication for Wired/Wireless Devices
- Individual User Login Creation (SuperUser)
- No Software/Thin Client Deployment Required for Directory Integration
- Management
- Delegated Access to Filter and Reporter
- User/Group/IP-based Policy Management
- MAC-based Policy Management
- Web-Based and Remote Management
- Restore and Backup Settings
- Centrally Manage and Sync Multiple On-Premise Units (Cloud)
- Infection Access Prevention
- Drive-by Spyware Protection
- Blocks Sites Infected With Malicious Mobile Code (MMC)
- Automatic Protection Against Phishing and Pharming Attacks
- Automatic, Real-Time Security Updates to Database
- Blocks Spyware and Keylogger Backchannel Communication
- Bandwidth Throttling/Reserving
- Binds to Directory (AD, eDir/Open Directory)
- Throttle/Prioritize Traffic by Directory Group or User
- Apply Rules Using Predefined Categories (i.e. Streaming Radio)
- Throttle/Prioritize UDP, IP Range, TCP/IP
- Ensure Network Critical Traffic is Available While Recreational Traffic is Reduced During Peak Hours
- Proactive Threat Notification*
- *Notifies Delegated Admins of Threats Immediately Via Email
- Set Category Violation Triggers by Group
- Auto Record User Desktop/s on Triggers
- Instant Alerts on Keyword/s at Group Level
- Instant Alerts when 'Rogue' Activity is Detected by User
|
- URL Filtering
- 15+ Million Websites in URL Filtering Database
- 75 Web Categories in URL Database
- HTTP/S Filtering Transparently and Dynamically
- Hybrid Cloud Dynamic Database Updates 24/7/365
- Granular URL (i.e. Block YouTube, Allow Specific Videos)
- Block Page Override Through LDAP Specific to Machine
- Restrict Use of Keywords
- YouTube Video Library. Accessed On/Off Premise (Cloud)
- Delegated Media Library Management (i.e., YouTube)
- URL Exception Request Manager
- Social Network Access Control (Allow Facebook, Block Posting)
- URL Override to Domain
- Allow/Block List Import
- Restrict Domain Extensions
- Sleep Schedules
- SafeSearch Enforcement
- Dynamic Glype Proxy Detection
- Web 2.0 Application Filtering
- Layer 7 Filtering
- Signature/Footprint Analysis
- Identification Through Heuristics
- Control IM (AOL,Yahoo,MSN,Google,Camfrog,Jabber,more)
- Blocks P2P (Gnutella,BitTorrent,eDonkey,Kazaa,Skype,more)
- Blocks Proxy Avoidance Communication
- Detect 'Rogue' Connections -,Non Standard Web Surfing
- Signature Based Control of UltraSurf and Hotspot Sheild
- Restrict Google Encrypted Search
- Reporting
- Delegate Report Access to Local Levels (i.e. H.R.)
- Auto-Record User Desktop on Threshold (Stored Locally)
- Live Desktop Stealth MultiView
- Store Locally All Network Activity for up to 1 Year
- "At Your Fingertips" Report Access. No Static Reports
- Dynamic Access to All Locally Stored Reports
- Drill Down Daily Reports to Individual User Activity
- Forensic Search Capabilities with Dynamic Search Results
- Provides Search Strings
- Search All Data by Keywords w/ Wildcards
- Real-Time Bandwidth Activity Monitor (Updated Per Second)
- Real-Time Top Bandwidth Consumers Monitor
- Automated Daily/Weekly/Monthly Reports (PDF,CSV,HTML)
- Reports User Name, IP (Source/Dest.), Net Bios Name
- Auto-Generate PDF Reports on Schedules
- Distributed Reporting Provides Central Access to Mult. On Premise Units (No VPN Required)
|