SteelGate Overview. Manage perimeter security and network traffic to ensure operational efficiency, and optimal Quality of Service (QoS)

Transcription

1 Internet Communications Made Safe SteelGate Overview SteelGate Overview SteelGate is a high-performance VPN firewall appliance that Prevent Eliminate threats & attacks at the perimeter Stop unauthorized access Lower operational costs Consolidate point products Control Control inbound and outbound network traffic Enforce Internet policy usage Reduce risk Manage Simplify management Application redundancy Superior fault tolerance Maximize performance and high throughput enables organizations to prevent attacks and block malicious behavior, control network traffic both inbound and outbound and centrally manage the perimeter defense infrastructure in a single security solution. SteelGate is a comprehensive firewall appliance that is based on the Common Criteria EAL4+ certified BorderWare Firewall Server software. SteelGate provides perimeter security in a single solution that allows organizations to: Prevent attacks and blocks malicious behavior to reduce risk Control both inbound and outbound network traffic with content controls to reduce legal liability Manage perimeter security and network traffic to ensure operational efficiency, and optimal Quality of Service (QoS)

2 Prevent... Prevent Attacks SteelGate has powerful default settings and a simple interface protecting against mis-configuration a common source of vulnerability, while allowing IT administrators to get up and running faster. Other firewalls take a different approach to address potentially weak policies by allowing direct access to configuration files to make policy changes. This has the potential to leave a network vulnerable to unauthorized access. By tracking multiple threat types in real-time, SteelGate makes a more informed and accurate decision about network traffic. The number of Denial of Service Attacks has increased 28% in 2005 and will increase, on average 30% per year until Radicati Group, 2005 Spyware is the fourth greatest threat to a company s enterprise network security and 67% of all computers have some form of spyware installed. IDC, 2005 Network Attacks SteelGate provides comprehensive threat prevention against new and evolving attacks such as Denial of Service (DoS), Distributed Denial of Service (DDoS), and others. These types of attacks are not used to communicate with end users, rather their purpose is to overload systems rendering them unusable. Buffer Overflow Prevention Buffer overflow vulnerabilities are a persistent problem and hackers use them over and over again to subvert security. Unique among firewall systems, SteelGate is not vulnerable to buffer overflow attacks with its hardened operating system and segregated environments. Anti-Virus SteelGate complements existing virus protection by scanning both inbound and outbound , web content and ftp file transfers for viruses, worms and trojans. SteelGate uses industry leading Kaspersky anti-virus signatures providing enterprise-class virus protection against the latest threats. Anti-Spyware Many networks are susceptible to spyware, especially when it is bundled within legitimatelooking downloads and enticing freeware. SteelGate provides unprecedented protection against all types of spyware including riskware, pornware, adware and non-trojan spyware. SteelGate protects networks at the perimeter for potentially hostile programs that are used by hackers and other cyber-criminals. With this added layer of spyware protection, SteelGate provides a multi-layered approach to protect against a broad range of threats that goes beyond traditional network level attacks. Spyware: riskware, pornware, adware, non-trojan spyware Other Hostile Programs: system and remote-control programs, key generators/loggers, credit card number generators, Java classes, unexpected audio/video, security data collectors, virus simulators, multi-functional cookies Anti-Virus Anti-Spyware Internet Company User Web/FTP Server SteelGate provides unique, multi-layered protection against a broad range of threats including viruses and spyware.

3 Control... Control Inbound & Outbound Network Traffic Integrated Network Address Translation SteelGate provides application proxy capabilities along with configurable Network Address Translation (NAT) to conceal internal network addresses so they appear to come from the external address of the SteelGate firewall. Superior Protection with Application-Level Proxies SteelGate is based on application-level proxies which offer superior security and filtering over traditional packet-filters and low level traffic controls. These proxies provide added protection by inspecting all inbound and outbound traffic at the protocol level ensuring that applications and end-users are protected. Applications within an organization can only be accessed through valid requests, removing the risk associated with exposing an organization s valuable assets to the Internet. SteelGate provides a comprehensive array of secure application and service proxies that enable access to vital Internet services. This is done without compromising security by providing direct access to core application servers or data sources with greater control and without limitations. Secure application and service proxies include (but are not limited to): HTTP, HTTPS, SSL FTP SMTP DNS Telnet AOL RealAudio Netshow MS SQL Oracle SQL Net PPTP IPSec User-defined proxies User User Internet SteelGate secures all inbound and outbound traffic with granular access for greater control. As an example policies provide the ability to: 1) Prevent viruses, spyware and malicious content 2) Control inappropriate content 3) Block network attacks Embedded Application-Specific Servers A unique feature of SteelGate is its embedded servers. By removing the requirement to set up separate systems, it makes it easier for an administrator to manage the associated challenge of configuring individual services. These servers are hardened against attack and provide additional security features for additional value to both small and large organizations. Web Proxy Server For most networks a large percentage of Internet connection bandwidth is used for web access. As networks grow, much of this bandwidth is dominated on "repeat" traffic, where the pages being downloaded have already been previously downloaded by other hosts on the network. The caching in SteelGate reduces bandwidth usage by saving pages and serving them repeatedly rather than re-loading the pages from the source.

4 SteelGate Overview DNS One of the most important security features of SteelGate is its ability to prevent any information about an internal network being revealed to an outsider. Using the dual name space (public/private) in SteelGate protects the internal hosts infrastructure while having control over records which are published to the Internet. With dual domain DNS servers this helps divide internal and public name space so organizations keep an internal network infrastructure private. SteelGate includes a built-in SMTP server that provides security, routing and content control that is compatible with all mail systems. The mail server shields inbound mail servers from direct external connections and blocks common SMTP attacks. This is in contrast to many other firewalls that simply use a proxy or a set of packet filtering rules to pass an SMTP connection from an untrusted external network to a protected mail server. FTP The SteelGate FTP server provides a secure way to distribute files to partners, customers and suppliers. NTP The built-in NTP server and client allows other systems to request the current time from SteelGate or if it acts as a client, SteelGate will request the time from another time server, and set its clock accordingly. Web Content Control SteelGate ensures end-user productivity by shielding users from harmful and inappropriate content. Using industry-leading SurfControl Web Filter, administrators can enforce internal Internet-use policies, significantly reducing threats associated with security, legal liability, productivity and network abuse. IPSec VPN Server and Client SteelGate empowers organizations to conduct business remotely by providing mobile employees with secure access to core business applications using an advanced built-in IPSec VPN. The industry standard IPSec VPN is fully compatible with other IPSec implementations and popular PKI products, offering a wide range of encryption algorithms and support for strong authentication tokens. SteelGate IPSec server is easily deployed for full server-to-server and client-to-server VPN connectivity. Still necessary for Internet security, firewalls continue to change - to add new features and evolve - as the needs of the Internet community grow and change. Change comes about because of increased use of the Internet as well as new service requirements, each of which comes with its own set of vulnerabilities and threats. Information Security, 2005 Remote User Internet Local User Remote Server Corporate LAN Provide secure access to core business applications with built-in IPSec VPN. Flexible Traffic Management SteelGate offers full control over data from applications, such as FTP, www or any other available services. Connections made from an internal network to an external network are accepted by SteelGate and are rewritten to appear as if they originated from the external side of the firewall.

5 SteelGate Overview Manage... Manage Perimeter Security Simplified Management For simplified management, SteelGate includes a Windows-based management interface that supports both local and remote administration. With intuitive controls and wizards, configuring and maintaining SteelGate is within the reach of even the non-technical administrator. In fault tolerant environments, two or more systems may be managed from the same interface, with synchronized settings for policy-based configurations. Securely and easily manage multiple firewall systems from a centralized console Easily configure policy details with an intuitive interface Easily navigate through all menu options including: servers, proxies and content filters High Availability and Load Optimization (HALO ) The unique High-Availability and Load Optimization (HALO ) capabilities in SteelGate deliver integrated fault tolerance and load balancing that maximizes the firewall investment. HALO monitors the firewall availability and will automatically failover in the event of a malfunction to protect against a single system failure. The Load Optimization capability of HALO distributes traffic between multiple firewall units by re-directing traffic from a primary unit to secondary units, providing complete load balancing without the need to deploy a third-party load balancer. In addition, SteelGate manages and monitors multiple systems simultaneously by propagating settings to all systems to maintain consistency.

6 Internet Communications Made Safe SteelGate Overview Integrated, Underlying Architectural Foundation with the BorderWare Security Platform Hackers no longer restrict attacks to specific IP traffic types and are launching blended attacks targeting , web, VoIP and other applications. Organizations can no longer afford to purchase point solutions from multiple vendors they need a comprehensive solution that leverages an integrated security platform to prevent attacks, control content, and manage the network infrastructure. BorderWare is the only company that is able to address these threats with perimeter, and SIP firewalls, which are all powered by the BorderWare Security Platform. The BorderWare Security Platform includes S-Core, a UNI-based hardened and optimized operating system. The patent-pending Stateful Failover capabilities included in the BorderWare Security Platform ensure high availability and superior fault tolerance. SteelGate exceeds the needs of most organizations by providing in excess of 500,000 concurrent sessions. With throughput of up to 500 Mbps, SteelGate provides the robustness, scalability, and availability for the most demanding environments. SteelGate enables organizations to prevent attacks and block malicious behavior, control network traffic both inbound and outbound and centrally manage the perimeter defense infrastructure in a single security solution. Hardware SteelGate Firewall appliances are available in three models: SG-200 mini-1u format, 2 GHz P4 Celeron, 3x 1000MB Ethernet, 512MB RAM, 1x 40 GB HDD SG-400 1U format, 2.4 GHz eon, 6x 1000MB Ethernet, 1GB RAM, 2x 40 GB HDD (Raid 1) SG-800 2U format, 2x 2.4 GHz eon, 6x 1000MB Ethernet, 2GB RAM, 4x 40 GB HDD (Raid 10) SteelGate is available as a software only option - BorderWare Firewall Server PREVENT Threat Anti-Virus, Anti-Spyware, Content Managing HALO (High Availability, Secure CONTROL MANAGE Prevention Network Attacks, Buffer Overflow Management Load Optimization) Operating System BorderWare Security Platform 11 YEARS SteelGate is built on the BorderWare Security Platform, a sound technological foundation to prevent, control and manage network traffic. About BorderWare Technologies Inc. BorderWare Technologies makes Internet communications safe. The company's perimeter and application-specific firewalls for and SIP enable customers to prevent IP-based threats, control content and centrally manage the network infrastructure. Founded in 1994, BorderWare has more than 8000 customers in 65 countries that have selected BorderWare solutions for their superior security, scalability, business continuity and lower total cost of ownership. Headquarters: Toll Free: US Federal Office: Europe: Affiliations and Partnerships 2005 BorderWare Technologies Inc. Any product photos shown are for reference only and are subject to change without notice. Internet Communications Made Safe, SteelGate, HALO and related marks are trademarks of BorderWare Technologies Inc. Other product and/or company names mentioned are trademarks and/or registered trademarks of their respective holders. Printed in Canada. Doc No.: STEELGATE1105