WEBSENSE SECURITY SOLUTIONS OVERVIEW

Transcription

1 WEBSENSE SECURITY SOLUTIONS OVERVIEW

2 Challenge The nature of threats has changed over the past few years. Gone are the days when security, better known as anti-spam, was primarily tasked with blocking based on volume and scanning for -borne viruses. The signature-based techniques used in early solutions, while still a viable part of a multi-layered strategy, are simply not capable of protecting organizations from the highly targeted, blended attacks of today. In February 2012 IDC stated, Signature-based tools are only effective against 30 50% of current security threats. Solution Read the cybercrime blogs and it s evident that is still a major attack vector. But read further and you ll find that a large percentage of the attacks are actually perpetrated via the web. The takeaway is facilitates the attack and web actually performs the actions. A modern security approach therefore requires both web and channels be evaluated with a strong cross-pollination of information between the two. Websense security solutions are built on our core TRITON technologies: Gateway Threat Analysis leverages security intelligence from the Websense ThreatSeeker Intelligence Cloud and Websense ACE (Advanced Classification Engine) collecting data from more than 900 million endpoints and analyzing up to 5 billion requests per day to thwart advanced malware, spam, and blended threats. Point-of-Click Threat Analysis sandboxes suspicious links embedded in s at the recipient s point-of-click. Behavioral File Sandboxing analyzes suspicious files attached to . Built-in Data Loss Prevention (DLP) monitors and prevents sensitive data such as product roadmaps or customers personally identifiable information (PII) from leaving the corporate network via . ThreatSeeker Intelligence Cloud URL THREAT DATA EVENT CORRELATION CONTENT PAYLOAD Internet Unfiltered Adaptive Learning Inbound Clean and Policy Compliant INTERNET Network & Reputation Analysis Malware Spyware Spam Content Outbound Clean and Policy Compliant Unwanted Quarantined Outbound Unfiltered

3 Features The Websense Difference ACE uses composite scoring with predictive analysis. Combined with classifiers for real-time security, data and content analysis the result of years of research and development they enable ACE to detect more threats than traditional antivirus engines every day (the proof is updated weekly at securitylabs.websense.com). ACE is the primary engine behind all TRITON solutions, and is supported by the ThreatSeeker Intelligence Cloud, which collects data from more than 900 million endpoints and analyzes up to 5 billion requests every day. point to dynamic-ip botnets or web pages that host dynamic code two techniques that may elude even the most robust gateway malware analysis. For example, an sent at midnight may contain a link to a web page that was harmless on the initial security scan at the gateway. However, the same web page may include injected malicious code when the recipient clicks on the link the following morning. URL Sandboxing helps thwart web pages hosting dynamic code injections that have bypassed initial gateway analysis. Gateway Threat Analysis Advanced Malware Protection ACE analyzes inbound and outbound for malware, spyware, and targeted and blended threats. With real-time composite risk scoring, anti-malware engines, and security intelligence from the ThreatSeeker Intelligence Cloud, protection is provided against known and unknown threats within . Accurate Spam Detection Websense provides highly accurate spam blocking with very low false positives that is backed by a 99 percent or higher SLA. A combination of identification technologies is used, including: sender reputation, connection management, adaptive learning, URL analysis, heuristics, suspicious PDF identification and optical recognition of image spam. Point-of-Click Threat Analysis URL Sandboxing Isolates suspicious links embedded in s and analyzes the payload of the corresponding web page at the recipient s point-of-click. Modern phishing attacks succeed primarily because phishing s now contain embedded links that Behavioral File Sandboxing File Sandboxing Suspicious file attachments are scanned in a cloud-based behavioral sandbox to protect against the latest, and most dangerous, zero-day and advanced persistent threats (APTs). Forensic Reporting Actionable reports that describe the system changes made and network communications used by the malware are automatically delivered to administrators. Built-in Data Loss Prevention (DLP) Policy Templates and Dictionaries Pre-defined dictionaries in multiple topics and languages plus built-in PCI-DSS and data privacy templates help you quickly identify and stop policy violations and meet regulatory requirements. Flexible Encryption Protect sensitive and regulated data by securing through TLS encryption for server-toserver protection. Advanced Encryption (optional) secures the and any attachments from sender to recipient.

4 Deployment Models Websense offers multiple deployment models for security, so that you get to choose which method makes the most sense for your organization. Cloud Cloud: An in-the-cloud security solution saves time and money with no equipment to install or maintain, built-in resilience, predictable costs and reduced administrative overhead. Protecting with Websense is easy. Simply point MX records to the Websense data centers and is cleansed before it reaches your network, saving bandwidth by removing spam and threats in the cloud. Websense data centers are Load balanced Redundant Located worldwide The service provides an SLA-backed availability of percent and is certified to ISO27001 standards to provide the highest degree of global and localized security, privacy and confidentiality. Appliance Appliance: Maximum control of all policies and reporting with an on-premises appliance. The Websense V-Series appliances are high-performance, preconfigured, security-hardened hardware platforms designed to support flexible deployment of the leading Websense web, , and data security solutions. The physical appliances are available in two models: Websense V10000: For headquarters and large office deployments. Websense V5000: For branch office and medium business deployments. A virtual appliance is also available: Websense ESGv Virtual appliance in OVF format. Hybrid Hybrid: Integrates in-the-cloud deployment with an appliance for an optimal balance between scalability and control.

5 Product Comparison Feature Cloud Security & Content Control (CES & CC) Security Gateway Security Gateway Anywhere (ESGA) Deployment Model Cloud Appliance Hybrid Websense ACE (Advanced Classification Engine) Multiple Anti-Malware Engines Anti-Spam and Anti-Phishing URL Sandboxing* File Sandboxing* Phishing Education and Reporting* In-the-Cloud Spam Filtering Service Level Agreements (SLAs) Data Loss Prevention for TLS Encryption Advanced Encryption* Image Analysis/Virtual Image Analyzer* Managed Through TRITON Console Virtual Appliance Option *Optional Add-On Learn more at TRITON STOPS MORE THREATS. WE CAN PROVE IT Websense, Inc. All rights reserved. Websense, TRITON and the Websense logo are registered trademarks of Websense, Inc. in the United States and various countries. All other trademarks are the properties of their respective owners. SecuritySolutions ENG.