iboss swg ipds/dlp/threat system - c.ymcdn.com€¦ · issue: new cyber threats are emerging every...

Product Brochure

www.iboss.comPhantom Technologies, Inc. DBA iboss SWG Web Filter (P) 877.742.6832 [email protected] U.S. HQ 9950 Summers Ridge Rd., Bldg. 160 San Diego, CA 92121© 2013 All rights reserved. Phantom Technologies, Inc. DBA iboss SWG Web Filter. iboss and Phantom Technologies are trademarks of Phantom Technologies, Inc. All other trademarks are the property of their respective owners. Con�dential – for intended recipients only. Distribution to third party is prohibited without prior written authorization.

iboss SWG IPDS/DLP/ThreatSystem• Advanced Threat Detection and Mitigation• Data Loss Protection• Malware and Botnet Security• Threat & Event Reporting

iboss SWG IPDS/DLP/Threat System

iboss Network SecurityThere’s no doubt that cyber threats are more sophisticated than ever, and they’re getting more complex and covert every day. Those threats, in addition to malware, data loss and the new potential for network peripherals “phoning home,” have eroded the e�ectiveness of current log-based threat detection and reporting. The iboss SWG IDPS/Threat/ DLP System changes how we approach threat identi�cation and mitigation by identifying with whom and where your network is communicating on a global map to identify threats proactively and prevent data loss.

The SWG IPDS/DLP/Threat System is a key component toproviding a secure web gateway for the organization. Withiboss SWG products centrally reporting to the SWG Threatand Event Reporter, networks gain exclusive features such as threat GeoMapping and heat map technology. iboss SWGprovides end-to-end security across all aspects of networktra�c and presents a 360-degree view across all user activ-ity. From web access to malware and threat mitigation, ibossSWG products provide regulatory and auditing compliance,reducing the total cost of ownership (TCO).


OVERALL RATINGFeatures

Ease of Use

Performance

Documentation

Support

Value for Money

The iboss SWG SuiteChoose an all-in-one solution, or custo-mize the suite to your network’s needs.

• Web Filter

• Malware/DLP/Threat

• Next-Generation Firewall

• Threat & Event Console

• MDM & EMM

• Mobile Security

• Email Spam Boss

• Email Archiver

About iboss Network Security, a division of Phantom Technologies, Inc.

Founded in 2003, Phantom Technologies, Inc. is a global provider of network security solutions. Its iboss Network Security line of products deliver network tra�c insight and threat mitigation. Proprietary engineering powerfully secures high-demand networks for web content management, intrusion, mobile device security and management, and email security.

To learn more about our services: www.iboss.com

Main: 1-877-742-6832 ext. 1 Support: 1-858-568-7051 ext. 3

iboss Network Security is recognized by Gartner, the world’s leading information technology research and advisory company. In addition to Gartner, iboss has received numerous awards related to web �ltering and Internet security.

SWG IDPS/DLP/Threat SystemIntrusion Detection/Protection, Data Loss, & Malware

Beyond Port-Based Security: Intrusion Detection, Prevention, and Data Loss Protection

The ever-growing need to access more of the web for essential operational functions is eroding the e�ectiveness of port-based �rewalls. To guarantee uninterrupted operations, we need make sure access to “mission critical” web and applications remains uninterrupted while simultaneously identifying and e�ectively mitigating hidden threats. The integrated Intrusion Detection, Prevention System (IDPS), Data Loss Protection (DLP) and malware security actively combine to scan all 65,535 ports, detecting threats such as anomalies, denial of service attacks, botnets and data loss from the unencrypted transfer of personal informa-tion. In addition, the SWG Web Filter module extends HTTP/S �ltering, application �rewall, bandwidth management (QoS) while the SWG Threat and Event Reporter provides packet level insight across all network tra�c and insight.

Issue: New cyber threats are emerging every second, and your network resources are under constant attack. Threats such as Trojans, botnets, malware and exposed data like unen-crypted SSN and credit card information can hide among the millions of packets �owing through your network. These threats expose the network and communicate sensitive information to hosts around the world. You need a method to identify and prevent these threats immediately and e�ectively.

Solution: iboss SWG Intrusion Detection, Prevention (IDPS) and Data Loss Prevention System (DLP) actively scans your network through Layer 7 and across all 65,535 ports, utilizing signatures and heuristics to identify and prevent threats and sensitive data loss. E�ortlessly sorting through the millions of packets �owing through your network, the iboss SWG Threat and& Event Reporter dynamically tracks threats through its exclusive GeoMapping technol-ogy. The iboss SWG GeoMapping technology maps with whom your network is communicat-ing, allowing you to identify potential threats by viewing them on dynamic world maps. This technology provides unmatched network insight, shortening threat responses while reduc-ing the time spent reviewing logs.

FEATURESIntrusion Detection and Prevention

• Stateful signature and heuristic-based detection scan for attack patterns and network anomalies.

• Thwart attacks such as network probes and port scans.

• Application aware-enforce policies based on applications.

Malware/Botnets/Threats

• Zero-day blended malware/botnet signature databases.

• Detect and mitigate threats at the gateway.

• Instantly identify at–risk users and machines on the network.

• Deep HTML analysis prevents hidden threats embedded deep within web pages.

Data Loss Prevention and Compliance

• Scan user-generated content on key web protocols.

• Prevent con�dential and suspect information from leaking out of the organization.

• Secure data leaks on blogs, wikis and application sites.

• Mitigate data loss by blocking transmission.

• Detailed reports of con�dential and suspect information including originating user identi�ed.

Secure Mobile and BYOD Users

• Protect against botnet, malware, DLP, and threats introduced by BYOD users.

• Secure mobile devices on or o� premise against data loss, malware, and threats.

SWG Threat and Event Reporter

• Integration with SWG Threat & Event Reporter.

• Provide reporting based on directory.

• Exclusive GeoMapping technology identi�es threat’s physical location.

• Comprehensive user-based reporting across all network tra�c including web, IDPS, DLP, and Bandwidth.


Virus

Mobile Devices

Internet

iboss SWG IDPS

IPS MalwareMobile

Security IDSDLP

Networks

Firewall

Advanced Threat Detection and Mitigation

Utilizing a signature- and heuristic-based scanning to track known and unknown threats, iboss SWG IDPS/Threat/DLP provides intrusion detection and prevention across all 65,535 ports, identifying network anomalies. In addition, the blended signature database uncovers malware, botnets, and emerging threats at the gateway, optimizing network resources and reducing infections. Threats are identi�ed, mapped, and mitigated, reducing management overhead and securing network resources.

Threat GeoMapping

We’ve shift our approach in how we identify threat — it’s no longer about what’s on your network but rather to whom and where your network is connecting. This shift in threat identi�-cation provides a new approach on threat mitigation. iboss SWG IDPS/Threat/DLP System’s real-time GeoMapping tracks threats and connections globally and dynamically with a reverse map IP. This quickly discloses the organization information along with its physical location.



Data Loss Protections

With increased compliances across industries, along with the ongoing need to protect sensitive information such as credit cards and social security numbers, the need to scan tra�c to identify potential data loss is essential. iboss SWG IDPS/Threat/ DLP transparently scans network tra�c, identifying potential inbound and outbound data loss. When the potential data loss is identi�ed, it’s quarantined and reported through automation.

Malware and Botnet Security

By blending best-of-breed Bitdefender’s malware signatures and heuristic database with Phantom Technologies database at the gateway, organizations achieve a layered security approach to an already existing structure. Packets are scanned at the gateway, utilizing zero-day signatures that clears tra�c �owing to the workstations of potential threats and simultaneously protects network resources from exposure to new threats.



Shield Critical Network Servers

With the explosion of Trojan and malware communication discreetly in the background, iboss SWG tracks communication across a global map to identify obscure communications. Secure critical network infrastructure against key network servers such as Mail, Web, Exchange, SQL, DNS, servers by creating a virtual shield detecting speci�c anomalies and behavior.

Mobile Devices

Headquarters

MOBILE SECURITY

Satellite O�ceSatellite O�ce

Consolidated Management of Remote Locations

(Web/Threat/Malicious/DLP)

Firewall

Scanning And Archiving

Firewall Firewall

Cloud

Know Them By Name – Directory Integration

With a growing number of devices (e.g., iPhones, androids, etc.) inundating and accessing networks today, IP-based reporting is not as e�ective as it once was for identifying threats. iboss SWG IDPS/Threat/DLP integrates with directories including Active Directory, eDirectory, OpenLdap, Oracle ID, and others, providing user- and group-based reporting and alerts.

Deployment Across an Organization

The Distributed Enterprise

By using integrated clustering and centralized consoles, iboss SWG IDPS/DLP/Threat System can be deployed across an enterprise without complex VPN or con�guration. Central reporting through iboss SWG Threat & Event Console provides insight across all locations and even on o�-premise mobile users.



Security Services

• Application Intelligence and Control

• Gateway Malware/botnet

• Intrusion Prevention

Intrusion Detection/Prevention

• TCP and UDP Scanning

• ARP Spoo�ng Detection

• Inspect SSH, RPC, SIP/VOIP, IMAP, POP

• Sensitive Data Inspection

• DNS and SSL Anomalies Detection

Gateway Malware/Threat

• Virus Signatures

• Deep Executable Scan

• Advanced Algorithmic Virus Detection

• Scan HTTP, FTP, Word Docs, Elf Files,

PDF, Compressed Files and More.

• Unique Malware Threats Blocked

Services

• LDAP User & OU/Group Integration

• Site-to-Site Clustering

• Consolidated Console

• AES Encryption (Distributed Enterprise)

Logging

• Connections Monitor

• Malware/botnet

• DLP

• Anomalies

• System Logs

• IPS Logs

Data Leakage Detection

• Scan Key Protocals

• Unencrypted Transfers of Sensetive Information

• Mitigate Potential Threats

• Quarantine and Detail Suspect Information

Features

• Network Tra�c Visualization

• LDAP/Active Directory Authentication Integration

• Database

• Single Sign-On

• Backup & Restore Settings

• Voice over IP (VoIP) Security

• Port Shield Security

• Integration With iboss SWG Security Suite

• Email Alerts

• SMB Backup

• DMZ

• Multiple LAN/WAN Segments

Diagnostics

• CPU Monitor

• Active Connections Monitor

• DNS Name Lookup

• Packet Trace

• Ping

• Reverse Name

Full Feature List

www.iboss.com

About iboss Network Securityiboss Network Security is an industry leader in Network Security, Bandwidth Management, Compliance based Mobile Device Management (C/MDM) and BYOD (Bring Your Own Device) Management. The iboss Secure Web Gateway line provides Scalable Internet access and application control, bandwidth management, and dynamic user based reporting and analytics. Our intelligent bandwidth shaping tools are all about e�ciency of design. We provide compliance management products to identify, manage, and secure access of the network for all users, on or o� network while retaining granular controls providing the �exible access needed.

Contact your account rep. [email protected]

North America: 1-877-742-6832 ext. 1 International: 1-858-568-7051 ext. 1

iboss swg ipds/dlp/threat system - c.ymcdn.com€¦ · issue: new cyber threats are emerging every...

Documents