NEW FEATURES IN WEBMARSHAL

Size: px

Start display at page:

Download "NEW FEATURES IN WEBMARSHAL"

Erik Terry
5 years ago
Views:

This latest release represents a major leap forward for customers, with an all new architecture allowing WebMarshal to secure the Web gateway for any sized organization, small or large.

WebMarshal s new array support makes managing large environments easier than ever. Fault Tolerance and Redundancy Web traffic processing is now independent from database logging.

1 WebMarshal 6.0 Marshal is pleased to announce the release of WebMarshal 6.0. This latest release represents a major leap forward for customers, with an all new architecture allowing WebMarshal to secure the Web gateway for any sized organization, small or large. NEW FEATURES IN WEBMARSHAL 6.0: Enterprise Management new architecture supports distributed, multi-server array environments with centralized administration and reporting. WebMarshal s new array support makes managing large environments easier than ever. Fault Tolerance and Redundancy Web traffic processing is now independent from database logging. If the database becomes unavailable, WebMarshal will continue to process Web requests and queue logging data until the database is restored. Improved Scalability and Performance new architecture allows for loadbalancing and arrays of Web proxy servers to service the needs of enterprise environments. Streaming Media Controls WebMarshal now allows you to block selected content, such as streaming media, prior to any download. Active Directory Connectors Active Directory connectors allow easy synchronization of user accounts, making it easier to authenticate users even in large environments. Policy containers allow administrators to divide policy into logical, easy-to-maintain groups. Policy Containers allow you greater control and flexibility over which policies apply to which users or groups. You can now set up hierarchical policies especially useful in enterprise environments or distributed networks with multiple domains or locations in different cities or countries. Archive File Unpacking allows you to become more flexible and targeted with your policies only blocking archive file types (ZIP, CAB, RAR, etc.) that contain restricted files such as executables or video files, but accepting archive files that contain safe files such as documents or databases. Report Exporting to Security Reporting Center WebMarshal reporting data can now be exported to the WELF standard (WebTrends Extended Logging Format) which can be incorporated by popular log analysis and reporting tools such as Marshal s Security Reporting Center. Centralized Performance Counters administrators can view consolidated, real-time performance data. Traffic text logs can be used by popular log analyzers. Easier to Use Interface numerous interface additions, including drag-n-drop rule duplication, rule simulation testing, plain-english rule explanations, new icons and quick access to common administration functions. Administration Access Settings create administration accounts that can perform simple tasks but not create or modify rules. 1

FEATURES AND BENEFITS EXPLAINED WebMarshal 6.0 introduces a substantial list of new features and capabilities, but what do these features actually mean for your organization?

The new architecture supports a distributed site environment, while still supporting all the centralized administration and reporting capabilities.

2 FEATURES AND BENEFITS EXPLAINED WebMarshal 6.0 introduces a substantial list of new features and capabilities, but what do these features actually mean for your organization? MANAGEMENT Enterprise Management WebMarshal 6.0 introduces Marshal s Array Manager architecture, as used in MailMarshal SMTP 6.0. The Array Manager architecture allows WebMarshal customers to deploy multiple WebMarshal servers and connect them together to form an array. The new architecture supports a distributed site environment, while still supporting all the centralized administration and reporting capabilities. This means that servers can be distributed across cities or countries, yet they all work together to consistently enforce your organization s Web security policies. The bandwidth required between the central Array Manager and the distributed Content Processing nodes is minimal. WebMarshal s Policy Tester allows administrators to test the effects of a new policy before deploying it. Policy is configured from one management interface (local or remote) and then replicated out to all WebMarshal servers in the array. This allows you to scale WebMarshal to support any number of users with no additional administration overhead managing an array is just as easy as managing a single WebMarshal server. All reporting and logging data is automatically consolidated so that you get a complete picture of your whole WebMarshal environment. For more information, please read the WebMarshal v6.0 Architecture Guide whitepaper available from the Marshal website. RELIABILITY Fault Tolerance and Redundancy With WebMarshal 6.0, the new Array Manager architecture allows WebMarshal customers to form more reliable, fault-tolerant environments. You can now deploy two or more WebMarshal servers working in unison. If, for any reason, one of those servers becomes unavailable, the other server(s) will continue to process Web traffic for the organization, ensuring that there is no disruption to Web access and that security policies are consistently applied. The Array Manager architecture also makes WebMarshal fault tolerant if the database logging server becomes unavailable for any reason. The WebMarshal policy servers will continue to process Web traffic as normal so that there is no disruption for users. WebMarshal will simply queue the logging data until the database server connection is restored. This allows you to perform maintenance on individual servers without disrupting normal Internet services for your users. Additional administration access settings allows for delegated administration, defining who can log into the WebMarshal console and what they can do. PERFORMANCE Improved Scalability and Performance WebMarshal 6.0 has improved on the standard performance - making scanning and analysis faster than with WebMarshal 3.7.x. More than this, with the new Array Manager architecture you can deploy as many WebMarshal servers as you need to process requests for any number of users. For more information, please read the WebMarshal 6.0 Performance and Scalability whitepaper available from the Marshal website. 2

3 FREQUENTLY ASKED QUESTIONS Q. How do I upgrade to WebMarshal 6.0? A. Although WebMarshal 6.0 looks very similar to earlier WebMarshal versions, underneath the products are entirely different. As a result the upgrade process from WebMarshal 3.X to WebMarshal 6.0 is a migration rather than an upgrade. At Marshal, we appreciate that migrating can be a daunting process so we have taken several measures to make the process as easy and simple as possible. Essentially, you will install WebMarshal 6.0 alongside your existing WebMarshal version and then run tools to upgrade the existing logging database and migrate the policy to the new version. You can then flip over processing to WebMarshal 6.0 once the migration is complete. This way, there is no downtime for the network. You are then free to uninstall your old WebMarshal version at your convenience. Please visit our Support section of our website for more details, or contact Technical Support if you have any questions. Q. Do I have to migrate to WebMarshal 6.0? A. No. If you are happy with your current WebMarshal installation and you can see no reason to move to WebMarshal 6.0, you do not have to migrate. It is part of our job to make WebMarshal 6.0 compelling enough for you to want to upgrade by delivering new features and capabilities that are of benefit to you. You will be supported on your older version of WebMarshal, but please note that technical support for your older version will expire eventually. Prior notification will be provided. If you have any questions about the benefits of WebMarshal 6.0 and why you should consider upgrading, please contact your Marshal reseller. If you can find no reason to upgrade to WebMarshal 6.0, we would like to hear from you please tell us what features you would like to see us deliver next time. Please send your comments to iwish@marshal.com WEB ACCESS CONTROL Streaming Media Controls You can now manage bandwidth and productivity more effectively by blocking selected content types before they are downloaded. WebMarshal 6.0 can identify types of file content present on a website in real-time before downloading it. WebMarshal achieves this based on the header information provided by the remote Web server when WebMarshal first establishes a connection. If a prohibited content type, such as streaming media, is indicated, WebMarshal can automatically disconnect, saving bandwidth and preventing users from accessing prohibited content. MANAGEMENT Active Directory Connectors Native Active Directory Connectors make it easy to synchronize user account and group information within complex Active Directory implementation. This includes multiple domains within a forest, eliminating the need for additional servers to authenticate users in different domains. MANAGEMENT Policy Containers & Server Groups WebMarshal 6.0 introduces a new policy management system called Policy Containers. These are hierarchical policy groups which permit you to set top-level policies and then insert more granular policies within them, allowing you greater freedom and flexibility over how you implement policies. For example, you can have a high-level policy container called File Download Policies. Within this container, you can set other containers titled New York, Los Angeles, and London to separate policies by location. Then within each of the location containers you can have other nested containers by group or department, such as IT Staff, Marketing Staff and All Other Staff. This way, you can set up different file management policies by location and then by department or group within that location. You can make the top-level container about the location or the group. You can establish containers based on any policy you wish, such as website categories (business vs. non-business), outgoing content (data leakage prevention), country, city, office, domain, server name, however you want to contain your policies. Server Groups can be used in a similar way. You can define server groups by geographic location, departmental responsibility or any other division. When defining new policy you are able to define which server group or groups this particular policy, or in fact policy container, this policy applies to. SECURITY Archive File Unpacking Archive File Unpacking allows more granular control of archive files and rich documents, including ZIP and PDF files. WebMarshal recursively unpacks complex file types to recognize embedded content, allowing select file types such as executables to be identified and blocked within archive files and, at the same time, allowing archive files containing innocuous content to pass. This allows you to be more targeted and flexible with your policies. For example, you can set policies to block archive file types that contain executables, video and music files or are password-protected, but allow archive files that contain documents or spreadsheets. This applies to both downloaded and uploaded content so you can also apply this feature for Data Leakage Protection (DLP). 3

4 Q. Why has the WebMarshal version number leaped from 3.7 to 6.0? A. WebMarshal 6.0 is significantly different from version 3.7 and incorporates an architectural redesign that was first developed for MailMarshal 6.0. WebMarshal 6.0 has also been re-written in a new programming language that allows the Marshal development team to use the latest development tools and deliver new features faster. For these reasons, we wanted to align the WebMarshal version number with the MailMarshal version number to better reflect the shared technology and roadmap of these two products. REPORTING WELF Format Export / SRC Compatibility Web traffic logs are now saved in the industry-standard WebTrends Extended Logging Format (WELF). This enables you to analyze WebMarshal data with a range of popular log analysis and reporting tools. One tool available is the Marshal Security Reporting Center (SRC). With SRC you can integrate WebMarshal logging data with your firewall logging data for comparison reporting or for greater analysis. As an existing WebMarshal customer, you may be entitled to a discount on purchasing SRC please visit our website to learn more about SRC or to download a free trial MANAGEMENT Centralized Performance Counters The Array Manager records all the WebMarshal performance counters from the various node servers so an administrator can see instantaneous summary views on the performance of their entire WebMarshal infrastructure. A wealth of information is provided including real-time stats on the number of active sessions, average request time, bytes sent and received per second and average analysis time. This information provides you with a detailed understanding of how WebMarshal is performing and how your organization uses the Web. EASE OF USE Improved User Interface WebMarshal was already easy to use and now it s even easier. WebMarshal 6.0 provides a range of enhancements designed to make WebMarshal more intuitive and streamlined for administrators. New additions include drag-and-drop rule duplication, rule simulation testing, plain-english rule explanations, new icons and quick access to common administration functions. MANAGEMENT Administration Access Settings To accommodate different administrative access levels, WebMarshal 6.0 permits the delegation of read-only access to the WebMarshal Console. This enables you to establish different levels of WebMarshal administrators depending on the job they need to perform. For example, you can delegate Help Desk staff to troubleshoot enduser problems but not modify policy within the WebMarshal Console. EXISTING CUSTOMERS - UPGRADING Existing WebMarshal customers with current maintenance agreements may upgrade to WebMarshal 6.0 FREE. WebMarshal 6.0 is a newly architected product and is installed clean, or side by side, rather than over the top of your existing WebMarshal version. The procedure for upgrading your WebMarshal server is documented on the Support section and Knowledge Base of our website. If you require assistance during your upgrade (and you have a current maintenance agreement), please don t hesitate to contact your local Technical Support representative via our website www. marshal.com If you have any suggestions or requests for our next version, we would love to hear them. Please let your Marshal technical support or sales representative know what you would like to see added. 4

5 WHY SHOULD I UPRGADE TO WEBMARSHAL 6.0? If you are an existing WebMarshal user, there are many reasons to upgrade to WebMarshal 6.0. If you are a medium to large-sized WebMarshal customer you may find that you have the most reasons to upgrade. WebMarshal 6.0 provides a new architecture specifically suited to larger environments or environments with multiple WebMarshal servers. You can now connect and manage all of these servers from one location saving administration time, consolidating reporting and policy configuration, and improving performance. For small and medium-sized customers, there are also plenty of reasons to upgrade. WebMarshal 6.0 provides enhanced security features, such as control of streaming media and archive file unpacking. WebMarshal 6.0 also sports a much improved interface. WebMarshal was already renowned for its ease-of-use but we have added new features, like on-the-spot rule testing, so you can test how rules will work as you are creating them. You can now also copy-and-paste and drag-and-drop rules, allowing you to easily implement and customize policies. For more information, please check out the following section explaining the latest features and how they can benefit you. Marshal s Worldwide and EMEA HQ Marshal Limited, Renaissance 2200, Basing View, Basingstoke, Hampshire RG21 4EQ United Kingdom Phone: +44 (0) Fax: +44 (0) Americas Marshal, Inc Peachtree-Dunwoody Rd Suite 770 Atlanta GA USA Phone: Fax: Asia-Pacific Marshal Software (NZ) Ltd Suite 1, Level 1, Building C Millennium Centre 600 Great South Road Greenlane, Auckland New Zealand Phone: Fax: emea.sales@marshal.com americas.sales@marshal.com info@marshal.com apac.sales@marshal.com 5

Upgrading MailMarshal SMTP 5.5 Installations to MailMarshal SMTP 2006

Upgrading MailMarshal SMTP 5.5 Installations to MailMarshal SMTP 2006 April, 2006 Contents Introduction 2 Case 1: Standalone MailMarshal SMTP Server 2 Case 2: Array of MailMarshal SMTP Servers 10 Additional