M86 Secure Web Gateway

Overview:

The M86 Secure Web Gateway (SWG) offers the best Web security and the most flexible deployment options in the industry, providing full coverage to every user, regardless of connection or location. It protects organizations from even the most complex malware while enabling productive access to Web 2.0 applications. Centralized policy control and a single interface make the M86 SWG easy to manage, whether it's deployed as a traditional appliance, virtual appliance, hybrid cloud or any combination of the three.

Highlights

	Most Accurate Malware Protection The anti-malware engine prevents all forms of malware, even new and targeted attacks, from infiltrating the network. Popular anti-virus, URL filters, firewalls and purported "real-time" solutions cannot protect against 60% of today's malware. Only the M86 SWG can completely close that malware gap.
	Safe and Productive Web 2.0 Use Granular Social Media Control allows organizations to open up access to Web 2.0 and the social media without worrying about data leaks, productivity loss or malware infection.
	Flexible Deployment Options Available as a traditional appliance, virtual appliance or hybrid cloud option, it extends full security to remote and mobile users. The M86 SWG integrates easily into numerous network architectures, so organizations can choose the option that best fits their infrastructure, cost and resource requirements.
	DLP and Compliance The M86 SWG reduces data loss risks and ensures regulatory compliance by protecting organizations from information-stealing malware; by preventing users from posting and uploading sensitive data to social media sites; and by providing simple, yet robust reporting to prove compliance or identify potential security risks.

Features and Benefits:

Benefits

Intelligent Malware Prevention
The M86 SWG's multi-layered anti-malware engine comprises intelligent technologies that detect and block next-generation malware that evades other solutions. This helps maintain productivity, reduces costly desktop re-imaging and cleanup, and safeguards data from data-stealing malware.

Safe and Productive Web 2.0 Use
Granular Social Media Control, coupled with the multi-layered anti-malware engine, allows users to access Web 2.0 and social media without worrying about data leaks, productivity loss or malware infection.

Security for All Users, Regardless of Location or Connection
Available as a traditional appliance, virtual appliance or hybrid cloud option, the M86 SWG extends full security and policy control to remote and mobile users.

Single Solution for Security, Policy Control and Reporting
Regardless of the combination of deployment options used, organizations can manage their security and reporting solution easily through a single, central interface.

Data Loss Prevention (DLP)
Identifies data-stealing malware, including keystroke loggers, phishing attacks, Trojans and root kits. It creates policy, enforces rules and makes it easy to prevent users from posting or uploading sensitive data to social media sites.

Regulatory and AUP Compliance
Simple, yet robust reporting identifies potential policy breaches or regulatory violations, and optional, extensive storage provides long-term proof of compliance. Because the M86 SWG prevents data loss, it enforces compliance with regulations that require data security and integrity.

Affordable Solution with Low TCO
Cost-saving features include convenient, flexible deployment options, ease-of-maintenance, scalability, adaptable malware detection and remediation, a future-proof design and single, centralized management. These features offer high value at an exceptionally low TCO.

Robust, Flexible and Easy-to-Use Reporting
Includes complete on-box reporting. For additional reporting capabilities, the M86 Security Reporter can be integrated with the M86 SWG to provide powerful, easy-to-use reports (templates or custom-built) for various recipients within an organization, real-time dashboards, and more.

Features

• Enhanced real-time protection from today's most complex malware
• Flexible deployment options include a traditional appliance, virtual appliance or hybrid cloud option, allowing full security for all users, anywhere and anytime.
• Granular social media control enables organizations to block posts, comments or uploads to social media sites such as Facebook and Twitter, while allowing employees to use other site functions.
• Central management enables any combination of deployment options to be managed centrally and easily from a single interface.
• DLP policy tools help users create DLP policy and enforce regulations through logic conditions, rules and single-click refinement.
• Application control enables the control (allow/block) and management of multiple popular applications, including instant messaging and Facebook, and rich content types, such as Adobe Flash, PDF and Microsoft Office files.
• Powerful logging and reporting of user transactions assist with regulatory compliance requirements.
• Secure content caching provides accelerated content delivery.
• X-Ray Mode tests new policy rules on live traffic without disrupting ongoing business operations.
• Intelligent update mechanism for automatic and controlled (per scanner) product and OS upgrades, security updates and third-party engine updates.
• SNMP support provides "just-in-time" alerts of relevant operational events using SNMP traps and email alerts.
• Supports multiple modes include transparent and non-transparent proxy mode as well as bridge mode.
• User authentication/identification based on Microsoft Active Directory® or other LDAP servers, without the need for installation of any additional software.
• Secure LDAP ensures that authentication credentials are transferred securely from the directory server to the appliance.
• Supports RADIUS authentication for administrators.
• Robust hardware platform for enterprise-grade throughput performance.
• Active/stand-by policy server option.
• High availability and load balancing.
• Multiple upstream proxies can be defined and used based on an assigned upstream proxy policy.
• Multi-level/delegated administration enables multiple administration groups to manage and monitor the system with different authorities.
• Smooth integration into various network topologies and monitoring systems (supports Cisco WCCPv2, ICAP, Syslog and SNMP v3 standards).

Appliance Models:

M86 SWG 7000 for Large Organizations:
Hardware Performance Specifications SWG 7000 (per blade)
CPU	2 x Intel Xeon Quad-Core E5506 2.13GHz
Hard Disk	Up to 2 x 146GB SAS
Memory	4GB DDR3
Rack space (2U)	Up to 4
Gigabit Ethernet NIC	4
Caching Kit (optional extension to the SWG 7000 scanner)
Hard disk	73GB SAS
IBM eServer® BladeCenter™ Chassis
Max. number of blades	14 hot swappable blade servers
Rack space (7U)	44.4 x 71.1 x 30.4 cm (WxDxH) 17.5 x 28 x 12 inches (WxDxH)
Redundancy	Hot swappable blowers and power supplies
Number of users per deployment	Up to 30,000 per chassis

5000 Series Performance Specifications:
CPU	2 x Intel Xeon Quad-Core E5506 2.13GHz
Disk	2 x 146 GB SAS (RAID 1)
Memory	4GB DDR3
Rack space (2U)	440 x 711 x 43 mm (WxDxH) 17.3 x 28 x 1.69 inches (WxDxH)
Gigabit Ethernet NIC	4
Caching kit (optional extension to the 5000 Series)
Hard disk	2 x 73 GB SAS
RAID controller	1 x IBM ServeRAID MR10i

M86 SWG 3000 for Midsize Organizations:
CPU	2 x Intel Xeon Quad-Core E5506 2.13GHz
Disk	2 x 146 GB SAS (RAID 1)
Memory	4GB DDR3
Rack space (2U)	440 x 711 x 43 mm (WxDxH) 17.3 x 28 x 1.69 inches (WxDxH)
Gigabit Ethernet NIC	4
Caching kit (optional extension to the 5000 Series)
Hard disk	250GB SATA2

Deployment Options:

The M86 SWG provides organizations with the widest range of flexible deployment options available. Offered as an on-premises appliance, virtual appliance, hybrid cloud or in any combination of the three, the M86 SWG enables organizations to:

• Provide equal, portable security to remote, mobile and on-premises users, regardless of how they connect to the network (internal or public)
• Choose the option that best fits their infrastructure, budget and resource requirements
• Manage security and control policies consistently and easily from a single interface
• Minimize costs by using one low-maintenance solution for all users, eliminating the need for additional hardware, and preventing malware attacks
• Improve productivity by allowing users to connect to the network anytime, anywhere
• Integrate the solution into a variety of existing network architectures easily

M86 SWG Deployment Options Include:

On-premises Appliance
Organizations that do not have or plan to implement a virtual environment can provide comprehensive security and policy control by deploying the M86 SWG as a traditional on-premises appliance.

Virtual Appliance
The virtual appliance provides the same high-level security and policy enforcement as its on-premises counterpart, but with the flexibility to deploy on an organization's hardware of choice via VMware.

When used with the M86 Security Reporter virtual appliance, organizations receive a fully virtual, easy-to-manage solution for security and reporting.

Hybrid Cloud
The M86 Secure Web Service Hybrid combines cloud-based and on-premises Web security to provide consistent policy enforcement and security to all users who connect to the network internally, remotely or while on-the-go. Plus, no hardware installation is necessary at branch offices.

Organizations can also choose to deploy various combinations of these options to meet specific needs, such as budget, number of users, existing infrastructure and branch offices by size.

Reporting:

The M86 SWG includes on-box reporting for powerful logging and reporting of user activities. For additional reporting capabilities, the M86 Security Reporter integrates fully with any combination of the M86 SWG traditional appliance, virtual appliance or hybrid cloud options to:

• Generate powerful, easy-to-understand reports (templates or custom-built)
• Provide intuitive real-time dashboards
• Simplify data by translating it into actionable information for showing the business value of an IT security investment, proving compliance and identifying potential security issues
• Schedule reporting for auto-delivery at pre-set times
• Drill down into data for ad hoc reporting that’s readily available

Documentation:

Download the M86 Secure Web Gateway Datasheet (PDF).