|
Categories |
|
Internet Security
|
 |
 |
 |
|
Hardware
|
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
| |
|
Software
|
 |
 |
 |
| |
|
Support |
 |
 |
 |
|
|
|
|
|
Protect
and direct users as they work online!
NOTE: For Network Security
Application pricing, check the particular appliance
platform page you are interested in: Hardware,
Software,
and
Virtual.
___________________________________________________________________________________________
Astaro
Web Security protects employees from threats and
allows you to apply terms and conditions to where
and how they can spend their time online. Spyware
and viruses are stopped before they can enter the
network and cause damage.
Everything is tracked and arranged in detailed
reports which show how effective your policy is so
adjustments can be made.
Astaro Web Security can be added onto Astaro's
Hardware, Software or Virtual Appliances in 1, 3 or
5-year subscriptions protecting your network from
web-based threats and allows you to manage user
roles by offering features like URL Filtering,
Spyware Protection, Antivirus Scanning, HTTPS
Scanning, IM/P2P Control and User Reporting and
Standard Support which is upgradeable to Premium
Support.
___________________________________________________________________________________________
|
|
Control who goes where on the web . . . increase
employee productivity and protect your network from
malicious threats activated from various web sites.
Specify which websites employees have access to by
using Astaro URL Filtering. Casual surfing wastes
time and some sites can contain unwanted and
inappropriate images, videos, or content. Spyware
and malware can be blocked before they are allowed
to be installed, thus saving even more time and
administrator overhead in keeping the machines clean
and running smoothly.
Using Astaro’s URL Filtering, companies
control Web Security by blocking and allowing
everything from an entire category type to a single
URL. The reporting will show who visited what site,
when, and how many times, along with bandwidth
statistics that allow you to identify excessive or
inappropriate usage.
Astaro URL Filtering is designed to provide many
benefits
without a confusing setup procedure. Just
enable the filter and then choose the material you
wish to block along with who should fall under this
set of restrictions. You can create multiple
profiles and assign them to different things; such
as putting the guest wireless LAN under heavy
restrictions while the in-house employee machines
enjoy a more relaxed profile.
With over
95 classification categories, you have
complete control over what is allowed to be
accessed, by whom, and when. Combined with a
directory authentication resource like Active
Directory, policies can be built for existing users
and groups, while detailed reports outline how
effective the policy has been and if adjustments
need to be made. Buckets can be used to combine
multiple categories into a single profile, so that
time isn’t wasted in building additional security
policies.
Astaro’s powerful URL Filtering technology enables
IT administrators to effectively control employee’s
web access to more than 3.8 billion web pages
allowing enforcement of company wide web surfing
policy.
- Comprehensive Up-to-Date Database
with 35+ Million Websites Covering over 3.9
Billion Web Pages in 96 Categories:
- Nudity, gambling, criminal activities,
shopping, drugs, job search, sports,
entertainment, etc.
- Additional categories can be created for
individual customization
- International content from hundreds of
countries in 65 languages
- Re-categorization via online form
- Fast Response Times through Globally
Distributed Database Replications
- Filter Might also Consider Global
Reputation
- Whitelists and Blacklists to Tailor
Access for Groups of Users
- Many User Authentication Options
- IP Address, Active Directory SSO,
eDirectory SSO, LDAP, RADIUS/TACACS+
- Time-based access policies
|
|
Protect productivity by preventing spyware
installations from web sites visited.
Spyware programs still present one of the biggest
issues for administrators despite many tools which
are designed to defeat them. Hours are lost
searching for and cleaning them out, and a users’
computer can be so heavily infested that it makes it
almost impossible to do any sort of work as they
deal with pop-ups, toolbars and endless prompt
messages. Astaro’s spyware protection can keep users
from infection while stopping sensitive data from
being silently transmitted.
They
are known by many names: spyware, malware, adware
and more; programs which are usually installed
accidently or under false pretenses. Once infected a
user is subject to a number of undesirable
consequences. Stop these programs at the gateway
before they can enter the network and be installed.
Astaro’s Spyware filtering can keep computers
running smooth, free up administrator resources and
keep employees happy and working without
interruption.
Using a global, live database with billions of
URLsitems classified as spyware will be blocked with
an informative message to the end user. No longer
will search and “not found” pages be altered and
injected with advertisements. Even if the spyware is
brought into the network physically on a USB drive
and installed without using the Internet, Astaro can
provide benefits.
Astaro’s Spyware protection reliably prevents
spyware from entering the corporate network and
prevents already infected systems from phoning home.
- Blocks (Unintentional) Downloads of
Spyware, Adware, and Other Malicious Software
- Prevents Infected Systems from
Sending Information Back to the Spyware (Home)
Servers
- Checks Against a Database of Known
Spyware URLs
- Filters and Removes Active Content
Such as Java, Active X, Flash, Cookies, VBScript
or JavaScript
|
|
Stop viruses before they enter the network from
the Internet.
Deflect
damaging and malicious content at the gateway using
dual, individual virus engines that operate in
parallel. This allows content to be scanned and
blocked before it has a chance to enter the network
and test the defenses of the workstations and
servers directly, greatly reducing the chance of
infection.
Viruses remain a problem even with the latest in
desktop defense. By stopping this malicious content
before it enters the network, administrators can use
Astaro to prevent viruses from draining
productivity, damaging data on servers and
workstations, and causing embarrassment to the
company from infected machines spreading the virus
to business contacts.
Astaro’s dual-scanning system allows for files,
messages, and website objects to be scanned twice
with different engines, increasing the effectiveness
vs. a single scanner. All companies have varying
response times to the latest threats, and even a
period of a few minutes of ineffective pattern
awareness can cause serious damage to your network.
By having parallel scanners, this risk is further
reduced.
Protected by Astaro Antivirus, users that encounter
viruses while surfing and downloading files get a
detailed block page informing them why the block has
happened, so they do not get confused or need to
create an IT support ticket for why a website or
download “isn’t working”. Mail messages with viruses
can be quarantined for review or deleted outright,
while built-in reports show you the effectiveness of
Astaro’s Antivirus solution.
Astaro’s unique Antivirus technology reliably
detects and blocks viruses, worms, trojans, and
other “malware” in emails, web and FTP downloads
before they reach email servers or desktops
- Dual Independent Virus Scanners with
Multiple Detection Methods
- Virus signatures
- Heuristic analysis
- Scans HTTP, HTTPS, FTP, SMTP and
POP3 Traffic
- Scans Encrypted SMTP Traffic
- Huge Signature Database
- More than 800,000 virus signatures
- Frequent automatic updates
- Flexible Management
- Can specify file formats (endings) and
content (MIME type) to block
- Emails and attachments can be dropped,
rejected with message to sender, passed with
a warning, or quarantined
|
|
Peer inside encrypted sessions for damaging
contents.
A secure surfing session protects user data and
privacy, but threatens the security of the company.
Sites visited and files downloaded over HTTPS can
contain malicious content that can enter the network
while the security device remains blind. Astaro’s
HTTPS filtering removes this unwanted network blind
spot and gives you full visibility into this
traffic.
HTTPS is a secure connection usually made between
the user’s browser and a target website. Web masters
use HTTPS in their sites so that file sharing and
even home-user sites can make use of HTTPS.
Astaro’s HTTPS filtering can examine inside encrypted
streams using an advanced man-in-the-middle approach to
provide a full range of control. Acting as a trusted
authority which can be deployed by download, email
attachment or directory policy push, Astaro is able to
completely scan HTTPS.
URL filtering can be performed on the sites accessed
and Astaro can also look deep inside the stream
itself and identify viruses, spyware and malicious
content that is being accessed over HTTPS. This
provides great protection should a site that is
trusted become compromised and start serving
malicious content over HTTPS, as Astaro will still
be able to stop it. Programs which tunnel over
HTTPS, like anonymous surfing or crafty instant
message programs will no longer be allowed to
connect.
Astaro’s HTTPS Scanning offers fully transparent
content filtering even for encrypted web sessions
protecting against abuse, infection, and unwanted
surfing activity over HTTPS.
- Transparent De-/Re-encryption of
HTTPS Traffic via Trusted "Man-in-the-Middle"
technique
- Complete Filtering of Encrypted
HTTPS Sessions and their Contents via Astaro’s
Dual AV Scanners
- Stops Tunneling Programs from
Abusing open HTTPS Ports
- URL Filtering for HTTPS Sites
- Automatic Validation of Server
Certificates Prevents Users from
(Un)intentionally Bypassing Certificate Warning
Messages
- Full CA Management
- One-Click Deployment of Gateway
Certificate
- Granular Tuning & Exceptions
|
|
Enforce rules about online chatting and file
sharing.
Instant messaging is often used for personal and
non-work related content and users put themselves
and others at risk by transferring files over this
medium which can circumvent protection methods in
place at the gateway. File sharing networks take up
precious bandwidth slowing down the network and
making others suffer. Using Astaro’s IM/P2P
Filtering you save money by restricting
access to these programs.
The Instant Message and Peer to Peer filtering
provides extended security benefits over a firewall
alone. Many programs have been cleverly designed to
ensure they can connect through security devices,
and have the ability to use common ports in order to
reach the Internet. Some are smart enough to scan
the device blocking them in order to find a port
which is allowed through. They then configure
themselves to use this path and can repeat this
process upon each startup. With this design, they
are impossible to block without a capable solution.
Using signature-based recognition, Astaro can
identify IM and P2P programs easily, and gives the
administrator the option to individually block these
programs. Administrators can also monitor how often
they are used, or remove the ability for Instant
Message programs to send and receive files. Peer to
Peer programs that use common transfer networks are
recognized by their core technology. Many utilities
and programs that appear to be a dedicated product
are really just a wrapping for an engine like
Bittorrent or Gnutella. Astaro’s filtering isn’t
fooled by this and if Bittorrent is set to block,
any program which uses this network will be blocked.
Astaro’s IM/P2P Filtering technology
reliably
detects usage of even the smartest Instant
Messaging and Peer-to-Peer programs like Skype and
allows enforcing company-wide usage policies.
- Manages the Use of Instant Messaging
Clients:
- AOL IM, ICQ, MSN Messenger, Yahoo!
Messenger, IRC, Google Talk/Jabber, Tencent
QQ, Skype
- Manages the Use of Peer-to-Peer
Applications:
- Applejuice, Ares, Bittorrent, Direct
Connect, Edonkey, Gnutella, IMesh, MUTE,
Manolito, Pando, Share, WinMX, Winny
- Provides Flexible Control
- Depending on application the
administrator can decide to either allow or
block it completely, block file transfers
only or just log its usage
- Specific users/IP addresses can be
excluded from general rules
- Specific hosts and networks can be
excluded from IM/P2P control
- Granular Bandwidth Control
- Define max. allowed bandwidth per
application
|
|
See where employees spend their time online and
how they use e-mail.
It
is critical to have feedback on how effective a
security device is. With clear, detailed, searchable
reports, Astaro can save you thousands by providing
the information you need to adjust configurations,
properly state how the Internet can be used, and get
the most out of the product.
Companies can be
surprised by exactly how much is lost in wages and
time while 50% of their workforce wastes two hours
each day surfing to inappropriate places. The mere
act of installing a filter on your network can set
the perception that Internet usage is monitored. As
soon as the first “blocked” page is seen, employees
will adjust their surfing habits accordingly knowing
that where they go is now being monitored.
Detailed reports also
demonstrate how much bandwidth is being used so that
if a single person is responsible for the majority
of web use at the company, this can be investigated
and addressed. Reports are available at a high level
summary viewer you can dive deeper into an
individual user’s usage and get a full list of their
activity. Reporting by category is also useful
reverse reports showing all users that accessed a
particular site or category can be created and
inappropriate web-usage can be addressed.
User reports are also
available for e-mail, letting you know what amounts
of messages are sent and received by everyone in the
company, so if a user is infected with a program
that is sending hundreds of advertising messages per
second, this behavior can be recognized and stopped.
Astaro’s products are
equipped with one of the most extensive logging and
reporting systems keeping you always up-to-date on
what’s going on within your network.
- Inline Reports
- offer up-to-date statistical information
for each security application, like Top
Domains/Users by traffic or time spend, top
email senders/receivers or top blocked
attacks
- Reporting Graphs
- Provide RRD style flow graphs with
daily, weekly, monthly and yearly statistics
about hardware components such as CPU, RAM,
and hard disk usage, IPS activity, and web
usage by IP address or user name
- Executive Reports
- Includes a summary as well as mayn
details about TOP-10 statistics taken from
Inline reports and reporting graphs for over
60 areas
- Can be generated at will and also
emailed out to a list of users (e.g. admin
and/or CEO) on configurable schedules
- Report Anonymization
- Hides user names and addresses within
reports
- Uses 4-eyes-principle to unhide selected
names
|
|
|
|
|