About Us. The Solution. The Threat

Transcription

1 White Paper

2 About Us Sasa Software specializes in IT security. It is owned by Kibbutz Sasa, situated on the Meron Nature Reserve in the northern part of Israel. Kibbutz Sasa is also the owner of Plasan Sasa, a leading worldwide armouring company. Plasan Sasa has been supporting for years the USA and NATO troops in Iraq and Afghanistan. Sasa Software leading product is the Gate Scanner which secures incoming data in a very innovative and sophisticated way. The Gate Scanner has been launched and implemented at Plasan Sasa for three years and is fully tested and mature product. Our company complex is regulated by the Ministry of Defense Security Authority. (MALMAB) The Threat The new generation of Malicious malwares are sophisticated,silent and hard to detect. Malicious malwares can penetrate the network via external devices, or via 3rd party applications. Once it has penetrated, the whole database and network performance, are exposed and in danger. In most organizations the most neglected IT security layers are at the Gateway and at the endpoint. Overall the main target is to protect the organizations network data from malicious malware. This threat is common to any organization. The Solution The Gate Scanner is cleaning and removing Malicious malwares from incoming data. The Gate Scanner encounters the threats before entering the organization network. The Gate Scanner is an "off line" solution and is the actual gate which all data and files are being transferred through. The Gate Scanner will provide the right protection at the highest level. By using Gate Scanner, it will allow the organizations to maintain its daily operations and keep receiving incoming data which has been bleached and approved by the Gate Scanner system. By using the Gate Scanner solutions it will enhance the performance of other existing security layers which are already integrated in the organization network. The Gate Scanner product has been tested and approved by various specialized security companies. The Gate Scanner is user friendly and has an easy, sophisticated Management console. Sasa Software is providing a daily update of the Gate Scanner Software, which is implemented in the organization. Gate Scanner has been approved by the two highest Israeli Governmental IT Agency divisions.

3 Our Products STD Stand Alone extensive deep scanning Station with various connections. SERVER Extensive deep scanning Server that can connect to 3rd party applications. New Desktop Extensive Deep scanning from the users Desktop rd Mail Deep scanning mailing system Coming Soon API Interface for linking 3rd party applications straight to the Gate Scanner engine. New Engine Extensive deep scanning Engine Injector One way Optical connection between separate networks

4 The External Device Process Data Conect the media to Gate Scanner Files Choose requested files/folders Scan Take out media and return to working station Notify Receive notification Results Download the clean scan results Main Features Scanning and Blocking: Sophisticated file type identification, with multi TrueType engines. Black and white listing. Blocks macros, embedded components and unrecognized file types. Deep content search (including archived files). Interworks with 5 leading commercial antivirus systems. One extra Anti Virus scan for backup purposes. Scanning process is with no involvement and presence of the user. Extensive work load capacity. Blackening - prevention of data removal from the network. Simple, user friendly interface. Manual option of Anti Virus scan on station. Manual updates to stations that are not connected to the network. Zero Day capabilities. Converting Files: Convert graphical formats, office files to PDF, excel to RTF, word to TIF, PDF to bitmap and back. Extract Macro and embedded elements for office files. Remove Java and embedded elements from PDF. XML Parser & Text Parser. Clean Meta Data. Security: Anti-tampering process. Gate Scanners operating system is sealed, shielded and encrypted - running by WIN 8 embedded. Option to restart the computer upon completion of each scan. Capability to transfer scanned files to its destination in encrypted and zipped form. Whitening target partition can have managed permissions on the network, FTP or user's home directory. Capability of using a One Time Password Central Management Console communicates with the white list station via a unique specific key to the organization. At the end of the process all info copied will be erased from the disc via Secure Delete. Support with the white list process in the computer memory ( RAM ). Protecting the actual station with an Anti-Virus.

5 Main Features Managing Users: User Verification - log on by local user or Active Directory or anonymous by e mail only. Local User verification. Verification against user address, profile groups or local database. Managing System: System Manager controlled process before the data reaches its destination (Guest Users etc.). Multi language user interface, English or Hebrew (with the ability to add additional languages) from the Central Management Console, to all scanning station and scan engines on the server. Central Updates Server- all stations receive updates via the server. Full central administration management from security managers station, including all whitening stations and scanning engines on the server Update the operating system with critical updates by uploading a file from the manufacturer site. Extensive search option of files prior to white list process. Option to activate system restore. Touchscreen Support. Option to run manual Test Mode. Send mail to user upon scan completion with hyperlink to files. Send notifications to system administrator if whitening process has failed. Detailed reports and logs. Convert reports and logs (Parser) to SIEM Systems. Full interfacing to SMFT system of Safe-T. DATA GATE SCANNER CLEAN DATA Windows 8 Embedded Integration with Systems User Friendly

6 * Server Server SCAN ENGINE MANAGEMENT SERVICE 3 rd party application 1 3 rd party application N 3 rd party application 1 3 rd party application N APPLICATION APPLICATION GATE SCANNER- 1 INPUT APPLICATION APPLICATION READ WRITE SOURCE SOURCE Network Connection GATE SCANNER- 2 OUTPUT LOGS Network Connection TARGET TARGET DATA PRIOR TO CHECK BACKUP DATA AFTER CHECK GATE SCANNER- N GATE SCANNER- N Supports 3rd party applications working simultaneously Support operate simultaneously. All STD features embedded in scanner engine Receiving on-line updates via the internet cloud Engines can be added in an Active/ Active way High working capacity. Smart Queue Management Accepting requests from Thin Client stations, or Gate Scanner Desktop Engine WEB DMZ IN OUT WEB APPLICATION GATE SCANNER- 1 GATE SCANNER- N MNG CONSOLE UPDATE SERVER The Gate Scanner Server is been Operated by 3rd party applications. Identical capabilities to the Gate Scanner STD. Engines Can be added online in an Active/Active way.

7 Desktop WEB DMZ Server UPDATES SERVICE MANAGEMENT SERVICE LDAP QUERY AD M.CONSOLE INTERNET A SQL LAYER A STMP MAIL SERVER A SSL BLACKENED FILE PARTITION BLEACHED FILE PARTITION USER PC/ THIN CLIENTS USER PC/ THIN CLIENTS UPGRADES & SIGNATURE SITE GS - 1 GS - N *** Advantages of the Gate Scanner STD. Multi-Server at your work station. Connect via VPN and work as if you were in your office. Injector OPTICAL CONNECTION A PC Tx Rx PC B GATE SCANNER INJECTION SOFTWARE GATE SCANNER INJECTION SOFTWARE A multi-disciplinary appliance One directional data transferring Data transferring from a regular network to a secured network only

8 Suggested Hardware 3rd Gen Intel Core I Dual Core Processor (3.3GHz, 3MB Cache) No Operating System 4GB (1X4GB) 1600 MHz DDR3 Non-ECC 500GB 7200RPM ATA III X Slimline DVD +/- RW Drive Integrated HD2500 Graphics Internal Dell Business Audio Speaker Intel Q77 Express chipset 10/100/1000 SMALL FORM FACTOR Standard 240W PSU External USB DVD-RW Dell Optiplex 7010 SFF This hardware can be upgraded to i5 and additional memory expansion. Intel Core I5 4570T Dual Core Processor (2.8GHz, 4MB Cache) No Operating System Tiny/Q87 WW vpro Ready WW - Win7 8GB PC MHz SoDIMM (2 DIMM) Integrated Video Intel Q87 Integrated Audio Intel Q87 Solid State Drive (SSD) 256GB SATA 2.5 Integrated Ethernet Intel Q87 Lenovo USB Preferred Pro Full Size - Hebrew Lenovo Enhanced Optical USB Mouse (1000 DPI) USB - red wheel Line Cord - Israel, HE Models Thermal Kit 35W Tiny Tiny PC 65W adapter DP to DVI dongle External USB DVD-RW Vesa Mount/Storage Kit Lenovo M93 Tiny i5 This hardware can be upgraded to i5 and additional memory expansion. Note - Gate Scanner can be installed on current hardware, which must be checked and approved by Sasa Software prior to software installation.

9 The External Device Process

10 Our Customers Contact Us Sasa Software (C.A.S) Ltd Kibbutz Sasa M.P. Merom Hagalil 13870, Israel Tel: Fax: Michael Piha V.P Marketing Tel: