Comodo SecureBox Management Console Software Version 1.8

Transcription

1 2 Comodo SecureBox Management Console Software Version 1.8 End User Guide Guide Version Comodo Security Solutions 1255 Broad Street Clifton, NJ 07013

2 Table of Contents 1.Comodo Secure Box Introduction Downloading and Installing the Secure Box Using Secure Box Applications Closing Secure Box Applications... 9 About Comodo Comodo Secure Box Management Console User Guide 2016 Comodo Security Solutions Inc. All rights reserved 2

3 1.Comodo Secure Box Introduction Comodo SecureBox (CSB) protects applications by isolating them inside a heavily-protected, fully functioning container within an endpoint operating system. Unlike a traditional sandbox which is used to house potentially hostile files, SecureBox protects the application itself and treats all outside processes as hostile. By isolating critical applications from other running processes, Comodo SecureBox prevents data exfiltration, remote takeover, keylogging, SSL sniffing, memory scrapping and zero-day malware. The CSB Management Console allows administrators to control and monitor large-scale deployments of SecureBox on enterprise networks. Secure applications can be deployed onto endpoints only after their enrollment to Central Management Console (CMC). The endpoint enrollment can be done by four methods via Active Directory, Work Group, Network Address and . While the first three methods will install CSB on endpoints automatically, the last method, invitation method requires the end-user or administrator to install CSB on the endpoints. This guide is intended to explain how to install CSB (for method) and use the Comodo Secure Box applications deployed from CMC. Guide Structure: Downloading and Installing the Secure Box Explains the procedure how to download CSB and install it Using Secure Box Applications Explains how to open and use secure applications Closing Secure Box Applications Explains how to exit the virtual platform 2.Downloading and Installing the Secure Box This section explains how to install CSB on endpoints that were enrolled by administrators via the method. Users of endpoints that were automatically installed CSB can skip this section. Users that were sent CMC agent download link mail have to download the application and install the agent on the endpoints. The user(s) will receive an from Comodo containing the CSB app download link(s) after the administrator has enrolled them via the method. The user has to click any of the 'link' to download the CSB installer package and save it on the endpoint. Comodo Secure Box Management Console User Guide 2016 Comodo Security Solutions Inc. All rights reserved 3

4 Double clicking on any of the package will start the installation on the endpoint The installation will start and the 'EULA' screen will be displayed. Click the 'Customize' button to change CSB installation path. By default it will be installed in the path C:\Program Files (x86)\comodo\comodo SecureBox. Comodo Secure Box Management Console User Guide 2016 Comodo Security Solutions Inc. All rights reserved 4

5 The CMC server address and CMC customer ID are autopopulated and are required to apply policies configured in the management console. The last two fields are applicable for premise installed CMC where the administrator can configure LDAP details and external IP address. Comodo recommends that these fields should be filled /edited by administrators only. The user must read the license fully and select the 'I accept the terms in the License Agreement' and click the 'Next' button. The installation progress will be displayed......and on completion, the user has to restart the endpoint. After the user has rebooted the endpoint, it will be ready for deployment of secure applications from CMC. Comodo Secure Box Management Console User Guide 2016 Comodo Security Solutions Inc. All rights reserved 5

6 3.Using Secure Box Applications After the endpoint enrollment process is completed, administrators will deploy policies according to organization's requirement. A policy may contain a number of secure applications that will be automatically pushed to your system and will be placed on desktop. CSB allows to secure websites, applications as well as folders. The secure applications will be available on your desktop. Samples of CSB secure application icons are shown below: Secure URI The browser depends on the settings configured by the administrator. CSB supported browsers are Internet Explorer, Comodo Dragon, Portable IE 8/9 and Comodo IceDragon. If the configured browser is not available in your system, you will be prompted to download the same. Secure Application Secure Folder To open a CSB secure application, just double click on it. Depending on the settings configured you may be prompted to enter password to open secure apps. Enter the password provided by your administrator for the secure app and click 'OK' The secure app will open. Comodo Secure Box Management Console User Guide 2016 Comodo Security Solutions Inc. All rights reserved 6

7 An example of an opened secure application is shown below: The CSB task bar will be in pinned status if configured by the administrator. Else, the task bar will appear when you place the mouse cursor at the bottom. Comodo Secure Box Management Console User Guide 2016 Comodo Security Solutions Inc. All rights reserved 7

8 Allows to pin/unpin the CSB task bar Enables virtual keyboard Switches between normal Windows and secure app Closes the secure app Opens the menu that displays the details of secure app. You can also switch to Windows or close the desktop from the menu. The user functions of the secure applications will vary according to the settings configured by the administrator. For example: Password - If configured, enter the password to open the secure app. Copy/Paste Protection - If enabled, the copy/paste operation cannot be done between the secured item and Windows desktop application. Desktop Isolation - If enabled, the normal Windows desktop will be isolated when the secured item is in operation. The user can switch between the desktop and the SB environment, by clicking the 'Switch to' button in the task bar. Auto Closed - If enabled, the secure application will be closed automatically if the last window in it is closed. Auto Start - If enabled, secure application will be launched during the Windows OS start. Always Open it in CSB - If enabled, the secure application will always run in CSB only irrespective of whether the application is opened directly or a file that opens through the application. For example, if you create MS Word application as a secure app and deploy it, all the word files will open in Secure Box only whether opened via MS Word or double clicked on a word file. Prevent Offline Access - If enabled, the secure application is not allowed to start if network connection is not available. Single Instance Mode - If enabled, only one instance of the secured application will open. If opened again, the secure application will show the already opened application. Download Prevention - If enabled, files cannot be downloaded from the Internet. Save Protection - If enabled, users cannot save the content of the web pages to their local machines. Currently only IE is supported for this feature. Show Switch Button - If enabled, the button to switch between secure application and desktop will be displayed. Lock Taskbar - If enabled, the CSB task bar is locked when the secure application is run. Block PrScrn - If enabled, no print screen is allowed in CSB. Full Screen - Applicable for 'URL mode' only. If enabled, the secure application will open in full screen mode. Private Mode - Applicable for 'URL mode' only. If enabled, the secure application will open in private mode. Use default data folder - Applicable for 'URL mode'. If enabled, Comodo Dragon and IE browsers can use profile data saved in their respective default data folders (running outside SecureBox). If this not enabled, Comodo Secure Box Management Console User Guide 2016 Comodo Security Solutions Inc. All rights reserved 8

9 these browsers will create its own profile data. Usename and password saved outside of SB cannot be auto used in SB. Prevent Application Minimize - If enabled, secure applications cannot be be minimized. Show Keyboard Button - If enabled, the keyboard buttons will be displayed in secure application desktop. Show Settings - If selected, the 'Show Settings' menu item will be available from the CSB start menu on the endpoints. On clicking it, the 'View Settings' dialog will be displayed providing details such as 'Protected Data, Allowed URLs, 'Allowed Applications', Terminated Process and About'. Collect System Information - If selected, the 'Collect System Information' menu item will be available from the CSB start menu on the endpoints. On clicking it, CSB collects the basic system information for troubleshooting to help CSB support team. Show My Secure APPs - If selected, all the secure applications that have run before will be available from the CSB start menu as 'Recent Secure Applications' My Favorite Web - Applicable for 'URL mode' only. If selected, the 'My Favorite Websites' menu item will be available from the CSB start menu on the endpoints. The Secure Box provides an extremely secure environment for Internet Banking, Online Shopping, using online services and web based applications, accessing your company website and much more. The Secure Box creates a direct secure tunnel between it and the website being accessed, so that all the traffic between them is strongly encrypted. You can be confident on you are connected to the correct site and your activities/account details cannot be eavesdropped. The Secure Box will open with the application interface / folder inside it. You can run the application or open the folder without the fear of its activities damaging your real computer or the infections resident on your computer damaging the application or files in the folder. The application / folder is totally isolated from your real system, so that any changes made to files and settings in the Secure Box will not affect the original versions on your host system. Changes will only be visible in the secure Box itself. 4.Closing Secure Box Applications The control buttons at the bottom right of the Secure Box interface, allow you to temporarily switch to your real computer system, if you plan to continue using the Secure Box at a later time, or to fully exit the Secure Box. To temporarily switch to Windows Click the right button from the shortcuts pane at the bottom right. The Secure Box will be temporarily closed. You can quickly return to it by clicking the CSB icon on the Windows task bar. To exit the Secure Box Click the X button from the shortcuts pane at the bottom right. Note: Remember to save the changes before you exit the Secure Box. Your changes will be lost if you exit the Secure Box without saving them. Comodo Secure Box Management Console User Guide 2016 Comodo Security Solutions Inc. All rights reserved 9

10 About Comodo The Comodo organization is a global innovator and developer of cyber security solutions, founded on the belief that every single digital transaction deserves and requires a unique layer of trust and security. Building on its deep history in SSL certificates, antivirus and endpoint security leadership, and true containment technology, individuals and enterprises rely on Comodo s proven solutions to authenticate, validate and secure their most critical information. With data protection covering endpoint, network and mobile security, plus identity and access management, Comodo s proprietary technologies help solve the malware and cyber-attack challenges of today. Securing online transactions for thousands of businesses, and with more than 85 million desktop security software installations, Comodo is Creating Trust Online. With United States headquarters in Clifton, New Jersey, the Comodo organization has offices in China, India, the Philippines, Romania, Turkey, Ukraine and the United Kingdom. Comodo Security Solutions, Inc Broad Street Clifton, NJ United States Tel: Tel: EnterpriseSolutions@Comodo.com For additional information on Comodo - visit Comodo Secure Box Management Console User Guide 2016 Comodo Security Solutions Inc. All rights reserved 10