Product Information Bulletin

Transcription

1 Clearswift SECURE ICAP Gateway v4.3 Version 01 07/03/2016

2 Copyright Version 1.0, March, 2016 Published by Clearswift Ltd Clearswift Ltd. All rights reserved. The materials contained herein are the sole property of Clearswift Ltd unless otherwise stated. The property of Clearswift may not be reproduced or disseminated or transmitted in any form or by any means electronic, mechanical, photocopying, recording, or otherwise stored in any retrievable system or otherwise used in any manner whatsoever, in part or in whole, without the express permission of Clearswift Ltd. Information in this document may contain references to fictional persons, companies, products and events for illustrative purposes. Any similarities to real persons, companies, products and events are coincidental and Clearswift shall not be liable for any loss suffered as a result of such similarities. The Clearswift Logo and Clearswift product names are trademarks of Clearswift Ltd. All other trademarks are the property of their respective owners. Clearswift Ltd. (registered number ) is registered in Britain with registered offices at 1310 Waterside, Arlington Business Park, Theale, Reading, Berkshire RG7 4SA, England. Users should ensure that they comply with all national legislation regarding the export, import, and use of cryptography. Clearswift reserves the right to change any part of this document at any time. Clearswift Public Page 2 of 8

3 Contents 1 Overview SNMP & SCOM Monitoring Additional Text Entities Secure LDAP and Secure FTP support Fixed issues Availability Interoperability End of life Platform support Packaging... 8 Clearswift Public Page 3 of 8

4 1 Overview This new release of the SECURE ICAP Gateway brings important platform changes and introduces several additional capabilities to the product. The additional features included in the release are listed below: SCOM & SNMP monitoring Additional text entities Secure LDAP and Secure FTP support 2 SNMP & SCOM Monitoring Key points: Enables simple integration with existing monitoring tools Allows deployment of Microsoft SCOM agents Expands SNMP support by adding SNMP polling to the existing SNMP traps support The deployment of the Clearswift Gateways is hardly ever done in an isolated environment. Instead, they become part of the existing IT infrastructure. One of the requirements that come out of the operations teams is the need to monitor the Clearswift Gateways with existing monitoring tools. The Simple Network Monitoring Protocol, often referred to by its acronym SNMP, is a widely used protocol to monitor systems. Most, if not all, of the existing IT monitoring tools support SNMP due to its long and extensive support in the industry. There are two ways in which the protocol can be used to monitor the Gateways: To raise alerts, where the device sends an SNMP trap to the monitoring server To query the status, where the monitoring server polls an SNMP server running on the Gateways The former has been part of the Gateways for many years and can be configured in the alerts section of the UI. The latter is the functionality that has been introduced in this version of the Gateways. Whilst SNMP is agent-less, there are other tools that require the installation of a monitoring agent in the Gateways. This is the case for Microsoft SCOM. Microsoft s System Center Operations Manager (or SCOM for short) is a monitoring product often used in Microsoft environments. Even though SCOM can monitor Clearswift Public Page 4 of 8

5 systems through SNMP, better insights of the status of the servers can be achieved through the use of its agents. The Clearswift Gateways have added support in version 4.3 to SCOM, allowing a simple deployment of the agents through the SCOM interface. Both SNMP and SCOM configuration are done through the console management in the Clearswift Gateways. By simply adding the monitoring servers, the Gateways are configured to support SNMP polls or the installation of SCOM agents. It must be noted that in both cases the monitoring information is related with the operating system or hardware of the system. 3 Additional Text Entities Key points: Support for over 80 new detection tokens. Includes country specific tokens for personal identifiable information for most European countries, USA, Australia, Japan and others. Simplifies the definition of confidential information and improves the accuracy of the detection. The accurate detection of confidential information is one of the main concerns of most Clearwift clients. To simplify definition of such information, Clearswift has added in this 4.3 version of the Gateways a whole list of new detection tokens, expanding the previously existing tokens with over 80 new ones. Country specific tokens, like national IDs or passport numbers, are prefixed with the specific country code and a search box has been added to facilitate searches. Clearswift Public Page 5 of 8

6 In order to simplify the definition of expressions where several text entities are used of even different types, the interface has been unified. In the 4.3 release, predefined text entities, user defined text entities, database obtained lexical qualifiers and plain text can all be combined through the same window and have operators applied to them. As a result, a better accuracy in the detection can be obtained in a simpler way. 4 Secure LDAP and Secure FTP support Key points: Provides encrypted protocol options for the connections made from the Gateways to corporate servers. Supports different methods for backups As part of the general securization of the system, support for encrypted communications has been added to additional sections where they weren t being used yet. They cover three areas: User Name Lists Backup & Restore Transaction log export User Names lists can now use Secure LDAP to get the information from the existing LDAP or Active Directory servers. Clearswift Public Page 6 of 8

7 For Backup&Restore and Transaction Log Export the enhanced security mode provides support for: SFTP FTP over SSH FTPS (implicit) FTP over SSL. Implicit SSL mode requires an SSL session to be established between client and server before any data is exchanged over Port 990. FTPS (explicit) FTP over SSL. Explicit SSL mode allows client to optionally switch from unencrypted mode to SSL, typically on Port 21. As well as standard FTP. 5 Fixed issues A number of client reported issues have been fixed in his release. Please see the release notes for more information. 6 Availability Phase 7 Interoperability Date General Availability 17 th March 2016 The version 4.3 of the SECURE ICAP Gateway can also be peered with Information Governance Server version 1.2 and version 1.3 to protect registered information. 8 End of life The availability of this release will start the end of life program of SECURE ICAP Gateway version 3.1. This lasts 12 months (as defined in the Support Services handbook), so the end of life will become effective on the 16 th of March Clearswift Public Page 7 of 8

8 9 Platform support Clearswift recommends that systems have a minimum of 6GB RAM, multi-core processors that support 64-bit instructions and over 250GB of disk space for low volume production environments. For customers with a greater workload the recommended minimum would be 8-12GB RAM, dual multi-core (at least quad-core) processors and 250GB of redundant disk storage with a performance similar to 15k rpm SAS drives. 10 Packaging This release will be available as an upgrade for all systems running 4.2.x download and upgrade the existing system through the usual process. To make the installation process easier, clients will be able to request professional services from Clearswift to assist in the deployment of this new version. Clearswift Public Page 8 of 8