M86 Security WebMarshal

Overview:

M86 WebMarshal is a Secure Web Gateway – a comprehensive solution which addresses the many requirements and issues that arise in managing Internet use. In a Web 2.0 world, organizations and employees are increasingly reliant on Internet access for business, education and work/life balance. Yet in terms of security and data protection Web 2.0 has created an unprecedented risk environment with new threats and vulnerabilities. M86 WebMarshal is the answer to managing and securing Internet use for any size organization.

As a Secure Web Gateway, WebMarshal is deployed between your organization and the Internet where it inspects all incoming and outgoing Web traffic. WebMarshal protects your organization and your users against the full spectrum of Internet threats, including malware, viruses, blended attacks and attempted fraud. It ensures that workplace Internet use is appropriate and complies with company policies. And, WebMarshal monitors and controls the flow of information in and out of your organization, protecting confidential information and intellectual property.

WebMarshal provides the answers to a wide range of Web security issues in one seamless, easy to use, highly scalable, dependable and cost effective solution.

Key Features:

• Inspects incoming and outgoing Web traffic in real-time.
• Manages access to websites by category and content analysis.
• Blocks Internet security threats such as viruses, malware, blended attacks and social engineering scams.
• Controls bandwidth consumption and applications including streaming media, instant messaging and social networking.
• Provides data leakage prevention (DLP) by controlling what employees upload to the Web including text and files.
• Supports flexible and intuitive policy enforcement with advanced Directory integration for user authentication and time/bandwidth quotas for personal Internet use.
• Enables detailed yet easy to understand Internet activity reporting.

Key Benefits:

Secures Your Web Gateway Against All Internet Threats
Blocks viruses, malware, blended threats, anonymous proxies and other harmful Web content, protecting your users and your IT resources from malicious websites.

Safeguards Against Data Leakage
By controlling the information users can upload to the Web, WebMarshal ensures that unauthorized staff cannot intentionally or accidentally transmit confidential or sensitive data.

Improves Productivity And Enforces Acceptable Use Policies
Uncontrolled Internet use can be a drain on bandwidth, network performance and can lead to significantly increased costs. WebMarshal allows you to manage access to high bandwidth sites and applications such as YouTube and even assign individual bandwidth quotas to help manage personal Internet use. Proxy caching saves bandwidth and delivers popular content faster.

Manages Bandwidth Use, Improves Performance And Saves Costs
Uncontrolled Internet use can be a drain on bandwidth, network performance and can lead to significantly increased costs. WebMarshal allows you to manage access to high bandwidth sites and applications such as YouTube and even assign individual bandwidth quotas to help manage personal Internet use. Proxy caching saves bandwidth and delivers popular content faster.

Offers Speedy And Measurable Return On Investment
WebMarshal Reporting demonstrates a rapid return on investment (ROI) and enables stakeholders to understand the key business benefits. WebMarshal also saves bandwidth, improves employee productivity and protects against costly malware infections, all contributing to even greater ROI.

Provides Dependable Legal Liability Protection
Inappropriate or offensive Web content is blocked, preventing users from exposure to pornography or obscene material. WebMarshal demonstrates that you have undertaken all reasonable measures to protect employees, fairly enforce policies and provide a safe working environment.

Meets Or Exceeds Compliance Obligations
Enables organizations to place restrictions on who can transmit confidential information over the Web and prevent access to banned Web content. This allows your organization to demonstrate regulatory compliance with relevant authorities or governing agencies.

Protects Your Reputation
Upholds standards and ensures that confidential information is not leaked to the Web. WebMarshal prevents users from placing your organization in a publically embarrassing position as a result of inappropriate Internet use.

Delivers Low Total Cost Of Ownership
Easy deployment on a cost effective, future-proof platform with minimal administration requirements, consolidation of key web security functions into a single management interface and centralized reporting makes WebMarshal the ultimate Secure Web Gateway.

 

Features:
 

Web Threat Security:

No single technology on its own can completely secure you against all Web threats. For this reason, WebMarshal employs a multi-faceted approach to threat protection which ensures it can address the full spectrum of Internet threats.

• TRACEnet – a continuously updated threat protection system designed to address a constantly evolving Web threat landscape. TRACEnet employs a range of technologies including reputation-based blacklists and heuristic filters to identify new threats in real-time. TRACEnet specifically targets:
  • Malicious Sites – containing malware, browser exploits, Cross Site Scripting or part of a blended attack.
  • Phishing Sites – established by scammers to impersonate legitimate sites and attempt to defraud unsuspecting users.
  • Spam Sites – associated with spam campaigns or botnet-related infection sites designed to convert your computer into a spambot.
  • Anonymous Proxies – security bypass sites which canpotentially allow a user to circumvent Web security and create an insider threat to your organization.
  • Virus & Spyware Protection (Optional) – real-time anti-virus and anti-spyware scanning using your preferred choice from four name-brand anti-virus vendors and two dedicated spyware scanner options to identify malicious content at the gateway before it is downloaded or accessed.
  • MIME File Type Security – control restricted file types (e.g. EXE) by their structure and content, ensuring that intentionally mislabeled files are correctly identified and cannot circumvent security. Also unpacks and scans archive files.
  • Real-Time Lexical Analysis – thorough lexical analysis of websites and URLs to reveal potentially malicious Web content.
  • Domain-Specific Security – enforce enhanced security procedures for unfamiliar websites or relax policies for trusted domains such as Microsoft.com.
  • HTTPS Scanning – full content inspection of SSL secured traffic, preventing exposure to malware from supposedly secure websites. Can also deny access to sites using self-signed or expired certificates.
  • URL Filter List (Optional) – set security policies for specific categories of Web content such as denying access to known hacker sites or sites with poor reputation.

Web Access Reporting:

M86 WebMarshal provides a rich, intuitive and flexible design for enforcement of Acceptable Use Policy and overall management of Web usage. It not only controls where users go on the Web but what they can do when they

• URL Filter List (Optional) – a choice of URL filtering lists is offered containing libraries of millions of URLs in dozens of categories. Filter lists offer improved accuracy for web access control and reporting.
• Real-Time Lexical Analysis – allows WebMarshal to dynamically filter and classify Web sites as your users browse the Web. E.g. deny access to sites exhibiting excessive profanity with pre-defined filters.
• File Controls – policy-based management of file downloads. Files can be controlled by size, file type, user permissions and domain. Over 170 file MIME types are pre-defined.
• Application and IM Control – comprehensive application controls allow you to manage access to streaming media, P2P and instant messaging.
• Personal Use / Quotas – flexible policy-based enforcement options are provided to suit your workplace culture, including bandwidth and time quotas (with optional extensions and personal reports for users to track their quota usage), website category access by time of day (e.g. lunch-time access to Facebook or Twitter), educational reminders/warnings and “click-to-confirm” access options.
• SafeSearch – enforce SafeSearch options for popular search engines such as Google and Yahoo, automatically removing obscene links from search results.
• Workstations – policy options linked to specific workstations allow you to offer access by computer or IP address as well as by user or group.
• Bandwidth Control – manage bandwidth use by domain, user or file downloads.
• Proxy Caching – WebMarshal provides full, standalone proxy caching functionality which helps improve browsing performance, reduces bandwidth consumption and helps saves costs by delivering frequently accessed Web content from a local cache.
• Reporting – comprehensive reports identify the most visited websites, top Web users, itemized bandwidth costs and blocked content. Understandable executive summaries, system monitoring, and auditing of user behavior for human resources are all provided in easy to access, Web-based reports.

Data Leakage Prevention:

Web-based email and Web 2.0 sites such as Facebook are driving new trends encouraging users to post content up to the Web – often without care or thought.

As more organizations realize the wealth of intellectual property and confidential data they posses in digital formats, this trend presents a large but often overlooked backdoor to data leakage prevention policies. WebMarshal closes this door and allows you to control who has the ability to upload sensitive or confidential information to the Internet.

• Keywords – WebMarshal analyzes and blocks text containing specific keywords or phrases from being uploaded to the Web, either in Webmail messages, blog postings, short message updates like Twitter or even contained within popular business files such as Word documents.
• Webmail/Blogs / Web 2.0 – limit or block access to Webmail accounts, blog sites and other new media sites which facilitate user-enabled content and restrict what information or material users can transmit via the Web.
• File Restrictions – control the types of files that users arepermitted to upload to the Web. Certain file types can be blocked altogether or can be limited to authorized users or approved domains.
• Policy-Based Authentication – implement your DLP policies by individual user, department, group or for all users; providing user authentication with NTLM support for Active Directory or Novell Directory Services.
• HTTPS Inspection – complete content inspection of HTTPS secured Web traffic. In a DLP context, this provides the ability to control what is uploaded to secure sites and ensures that certification standards are adhered to when uploading private information.

Advantages Any Organization Can Appreciate

WebMarshal is ideally suited to meet the needs of almost any organization. Its flexibility, powerful features and reliable proxy-based design make it well suited for small and medium-sized companies. WebMarshal also boasts a highly scalable enterprise architecture which can easily support geographically distributed, multi-server environments with centralized management and consolidated reporting.

Simple, Easy Deployment
WebMarshal can be installed and running within half an hour. Clear default policies mean that it works immediately to block offensive and malicious content. It can be deployed as a standalone proxy server (with caching), a Microsoft ISA Server plug-in or on multiple servers in a load-balanced array.

Grows With Your Business
WebMarshal gives you the flexibility to grow as your business grows. It supports virtualized environments and doesn’t become obsolete like many fixed hardware platforms. It is regularly updated with new and useful functionality so you can continue to rely on WebMarshal for years to come. You can easily add additional WebMarshal servers as you need them with no extra licensing costs.

Set and Forget Administration
WebMarshal has been designed with minimal administration in mind, so you can concentrate on the productive operation of your business. Close Active Directory and Novell Directory Services integration means that WebMarshal is automatically up-to-date with new user accounts.

More Features and Greater Value than Any Other No other
Web security solution offers the depth of functionality and value that WebMarshal provides - malicious website protection/anti-virus/anti-spyware/URL filtering/inbound and outbound Web content management (including HTTPS)/real-time analysis/file controls/streaming media, instant messaging and application control/bandwidth management and usage quotas/ data leakage prevention policies/multi-server management architecture/proxy caching/seamless directory integration for user management/in-depth reporting and intuitive ease-of-use. Nothing else comes close.

Technical Specifications:

 

Documentation:

Download the M86 Security WebMarshal Datasheet (PDF).