network ...we dig deeper. safe & secure smart personalized time-saving professional

Transcription

1 smart network CYAN security...we dig deeper. safe & secure professional time-saving personalized

2 Hello. We would like to introduce ourselves. your CYAN network We re CYAN Network Security, your partner for proxy technology and Web filtering solutions. Our roots date back more than 15 years, when we created one of the first Web servers and one of the first proxy servers on the market. We soon learned that safe Internet connections are key to business success. From this experience was born our passion for developing solutions for Web security, and the birth of our company, CYAN Network Security. Named after the calming blue-green color that stands for vigilance and reliability, CYAN Network Security reflects these traits in our mission: we create proxy technology and Web filtering solutions that you can depend on for business security and productivity. With our products, you have easy-to-use, flexible tools that you can tailor easily to your specific needs. For an affordable price. Whether you have 25 or 25,000 users. Our flagship product, CYAN Secure Web, can help you meet specific business goals while controlling access to and from inappropriate websites and applications. We protect your system from outside threats, as well as from internal misuse of the Internet. Plus, our network of professional channel and integration partners helps you apply our products to best meet your needs. Our in-house support team is always ready to lend a hand, too. And, that saves you time and money. Improves productivity. And helps keep your business safe. How do we do it? Simple. We dig deeper.

3 We dig deeper...to make the Web safe for you. Our core business is keeping you safe when you browse the Internet. To do that, CYAN Network Security solutions block non-business-relevant websites and inappropriate applications from your system. When it comes to modern websites and applications, "WYSIWYG" (What You See Is What You Get) is no longer true. Lots of data is transferred in the background without our notice, containing hidden objects and unsecured data that presents threats to your system. Our business is to identify the good and keep away the bad. We help you close the door on Web spam, malware and other unwanted Internet content. We help you stop phishing attacks from entering your system. We help you implement responsible and safe Web browsing.

4 We dig deeper...to save you time, money and headaches. You ll begin to see the benefits of our solutions from the first day you use CYAN Secure Web. An easy-to-use Web interface gets you up and running in no time, and keeps you up-to-date. Integrated category filters and anti-virus engines make customization fast and simple. SSL interception gives you easy control of filters on encrypted data streams. Scalability lets you adapt our solutions to multi-core and multi-cpu systems with minimal effort. Flexible deployment means you can install Secure Web easily to a wide variety of platforms. Integrated reporting helps you evaluate system efficiency in a timely manner. Straightforward, scalable subscription fees translate into solutions that every company can afford. Professional support from a European based network of partners reassures you that help is always close at hand.

5 We dig deeper Secure List Secure List is a database organized into categories of similarly-themed websites. You can activate one or more categories according to your needs: for a specific user, defined user groups or individual IP addresses. When you do, those users can no longer access the websites, which are not relevant to your business. Which helps keep your company productive. We update Secure List daily, then download it automatically to your installation. So, your system is always up-to-date. to give you time-tested, flexible Web solutions for your business security needs. Application Blocking Nearly every modern application incorporates Web technologies, to "talk" to the Internet. But most firewalls allow access only from HTTP and HTTPS. So, applications "wrap" themselves in HTTP to be accepted by your firewall. There s only one problem: firewalls and standard proxy servers don t know what s actually being transferred inside the HTTP "wrapper"". Application Blocking helps you uncover the real data, and the danger that can come with it. It analyses Internet requests in various ways to detect embedded protocols, types of data transported and other typical traffic characteristics. Then, it builds a profile of the application and its purpose. So that you can "see" what is really inside the traffic. Just like with Secure List, you can permit or refuse an application as you like: for a specific user, defined user groups or individual IP addresses. Secure List Categories x Ads x Alcohol & Tobacco x Communities x Dating x Downloads x Drugs x Education x Finance x Gambling x Games x Government x Health care x Hosting x Jobs x Military & Weapons x Mobile phones x News x Phishing / Spyware / Virus / Proxies x Pornography x Real estate x Religion x Search engines / Directories x Shopping x Sport x Streaming media x Travel x Vehicles x Violence x Webmail x Audio/video x Messenger x Office documents x Executables x Active content

6 We dig deeper to stop viruses and malicious code before they reach your systems. CYAN Secure Web gives you in-depth coverage, complementing your client anti-virus software. Our protection starts at the gateway, where we scan incoming data to prevent infected files from entering your network domain. We integrated anti-virus scanners into CYAN Secure Web, so your administrative tasks are minimal. All you have to do is decide which scan engine to use. And, to block viruses, Trojan horses, worms and other malicious code hidden in encrypted data, CYAN Secure Web first breaks up the data, then applies its filters to the clear text stream. Of course, we make the clear text available only in your proxy server memory. That means that the data is still encrypted when transferred to your network. Together these features give you better system performance and stability. And peace of mind.

7 We dig deeper into encrypted traffic SSL is a good thing. It ensures that your communication channel is secure when you transfer data. But, your system may not be safe, because a classic firewall is "blind" to content in encrypted connections. Even when the system displays user warnings about invalid security certificates, most people simply click "Continue" when they see these browser popups. Something we call "click-thru syndrome." Which means that undesirable data can be entering your network. CYAN Secure Web helps remove the danger caused by "clickthru syndrome." It gives you the power to control the policy and access in handling certificate validation failure. It intercepts encrypted connections to reveal the traffic inside the proxy in clear text. Then, it applies all filters, including anti virus scanning, without losing the security of transport link encryption. When you activate CYAN Secure Web SSL interception, your security solution can "see" clearly.

8 We dig deeper to help you make informed decisions about your Internet security. Reporting System is our database analysis tool that lets you know what s going on in your system. You can direct the Internet traffic logs of all your CYAN Secure Web installations into one central database, then use Reporting System to compile quick, comparison and summary reports. And, knowledge is power. Reports show you the results of your efforts and of your investment in CYAN Secure Web. Reports give you a comprehensive insight into your system. Reports help you evaluate the effectiveness of your security solution, so you can make adjustments, as necessary, to keep your network safe.

9 CYAN Secure Web a proxy server with many faces. CYAN Secure Web is a proxy server. You can use it as a standalone, dedicated proxy server. So far so good. But, you have many more deployment scenarios and keywords with our solution. CYAN Secure Web is a proxy server that is: Authorize, controll and protect your Internet users. Firewall Clients Highly available. You can build a cluster to ensure that your proxy service is always on and available. Load balanced. You can build a cluster of two or more nodes that share the load across all machines. Scalable. You can add a node to the cluster whenever necessary, adapting to your changing business needs. Transparent. You can incorporate the proxy in the Web traffic even if your client PC is not configured for this purpose. Distributed. You can manage a farm of proxies, installed in different locations or branches of your company, from a single, central point. Multi platform. You can choose the platform that best fits your environment. Integrated. You can attach the proxy to your authentication infrastructure, and control the activities of both individuals and groups of users. CYAN SECURE WEB Authentification Server Active Directory e-directory LDAP-Server Database

10 to make sure your system is available when you need it. CYAN Secure Web Cluster Firewall CYAN SECURE WEB CLUSTER We know that, sooner or later, all computer systems fail. But if your business success depends on reliable, available Internet access, CYAN Network Security can help you eliminate this potential. A redundant "active-passive" system wastes your resources and money. That s why we designed our proxy system to work "active-active" in clusters of multiple appliance machines. Based on standard server hardware, the system is made redundant, and the load is shared across all nodes. This eliminates idle server time. And gives you high availability and load balancing. And, as your needs grow, your clusters can increase with them. Just add a machine to the cluster, and you re up and running. With CYAN Secure Web, your system responds when you need it. With no wasted computing power. With no special hardware. Available, efficient, scalable, quick and easy. So, your system network runs at its highest level.

11 CYAN Secure Web Secure Web for Linux ready for you on multiple platforms. Installation, updates and upgrades are easy. We supply our solution for the Linux platform as easy-to-install packages for your corresponding software management system. Well-defined version management makes it easy to keep your security solution always up-to-date. Secure Web for Linux is: Installable and updated using our online software repository Managed using your favorite Web browser PVE Secure Web PVE Image The Proxmox Virtual Environment (PVE) is an easy to use Open Source virtualization platform for running Virtual Appliances and Virtual Machines. Based on Ubuntu server, our Secure Web PVE Image is: A ready-to-go, certified virtual appliance for the Proxmox Virtual Environment An easy-to-use appliance template you can configure and start up in only seconds Updated and upgraded easily from our online software repository Secure Web for Windows Our version for Windows comes as a software package that installs and integrates seamlessly with your existing Windows based infrastructure. Secure Web for Windows is: Managed using your favorite Web browser Updated and upgraded easily with our sophisticated setup software Secure Web vmware Image Our ready-to-go virtual appliance is based on Ubuntu server, included with Secure Web for Linux. Secure Web for vmware Image is: Installable on any vmware product and ready to start using the proxy service Updated and upgraded easily from our online software repository Secure Web Appliances Our all-in-one hardware appliance is the optimal customized platform that makes the deployment of Secure Web really easy. Use your favorite Web Browser for configuration and all operating tasks are. You don t need any knowledge about the integrated operating system. Secure Web Appliance is: A self-contained black-box that lets you startup and surf immediately Operated entirely with your favorite Web browser Updated and upgraded in your Web interface

12 CYAN Secure Web Appliance content security in a box. DS1 RS4 RS6 RS8 VIA Eden 1,2 GHz CPU 4x Ethernet 10/100 MBit 1 GB RAM 40 GB HD External Power Supply Dimensions (W x L x H): 300x78x220 mm up to 100 users * Intel Celeron E1200 DC (Dual Core) 4x Ethernet 10/100/1000 MBit 4 GB RAM ECC 2x 250 GB HD Raid 1 Depth: System with 1 Height Unit up to 1,000 users * Intel Q6700 2,66 GHz (Quad Core) 4x Ethernet 10/100/1000 MBit 8 GB RAM ECC 2x 250 GB HD Raid 1 Depth: System with 1 Height Unit up to 5,000 users * 2x Intel Xeon DP E ,66 GHz (Quad Core) 4x Ethernet 10/100/1000 MBit 8 GB RAM ECC 2x 250 GB HD Raid 1 Depth: System with 2 Height Units up to 10,000 users * * Capacity depends on the environment and the selected options Our appliances are servers that are built on standard industry components. We make sure they are well-defined to supply you with a high quality product that meets the requirements of a proxy server system. And our appliances contain an operating system - proxy bundled solution, operated solely using your favorite Web browser. To meet the needs of businesses of all sizes, we have four models for you. Here are the specifications, including the approximate maximum number of users that each machine can handle.

13 ...content security in a box. CYAN Secure Web Appliances Zero Conf Technology All Secure Web appliances include zero conf technology. This saves your entire system configuration to an integrated SD card. If you replace an appliance, you can swap servers by just inserting your old SD card into your new system. Your new machine will restore all settings. Operations continue seamlessly with your new appliance hardware. Advanced Unit Replacement Advanced Unit Replacement (AUR) is an extra service from CYAN Networks for a quick replacement of a defective system. We send you a replacement unit fast by the next business day to keep your downtime to a minimum. High Availability & Load Balancing You can connect all your appliances together to create a load-balancing cluster. Your first two nodes are set up for fault tolerance to provide high availability. The setup is in active/active mode, to give you load balancing with only two nodes. And you can add any number of machines to scale, according to the needs of your environment.

14 CYAN Secure Web HTTP / HTTPS, FTP-over-HTTP, POP3, IMAP proxy Authentication Microsoft Active Directory, NTLM transparent authentication e-directory transparent authentication LDAP authentication SQL database authentication IP based authentication Support for terminal server environments Integrates with Microsoft ISA Server Flexible deployment Passthrough mode Transparent mode Caching, caching exceptions Proxy cascading & conditional routing, including backup routes WCCP support Content filtering URL filtering by category (Secure List) User defined categories Individual exceptions and extensions to Secure List Application detection and filtering - Executables, binaries - Archives, Images, Audio/Video data - ICQ, MSN Messenger, Skype Mime type and cookie filtering File extension filtering Configurable exceptions to all filtering mechanisms Soft Use Policy Whitelisting HTTP method filter (including WebDAV) Detects and reacts conditionally depending on the user agent Customizable status and filtering pages Scalability, high availability and load balancing High performance and reliability Modular architecture for distributed deployment Self-healing technology Ready for use within the telecom. industry (carrier grade) SSL intercept mode Interception of HTTPS, POP3S and IMAPS Apply all content filters including virus scanning on encrypted traffic Certificate validation and security policies per profile Peer-to-peer service control Instant messaging control Dynamic protocol detection Control of interception and exceptions per profile Management (create/import) of a certification authority Dynamic creation of signed certificates Plain-text forwarding of intercepted connections Filtering profiles Profile assignment per user, group or IP address Assign different profiles per time interval Dynamic, hierarchical profiles Virus scanning Integrated ESET NOD32 engine Integrated Sophos engine Support for any command line scanner Control of Anti-Virus scanning per profile Management of AV scanning exceptions Web based administration interface No client installation necessary Remote administration from any browser Sophisticated, easy to use Web 2.0 interface Reporting System More than 60 report templates Report execution scheduler Send report results via Report output in PDF, HTML, CSV, XML User role model Four-eye-principle System Requirements Linux Debian 5 or later Ubuntu 8.04 or later Redhat Enterprise Linux 5 or later SUSE Linux Enterprise Server 10 or later Microsoft Windows Windows 2003 Server or later Other platforms VMware Image: all vmware products PVE Image: Proxmox Virtual Environment version 1.0 or later Microsoft ISA Server 2004 or later Database systems supported PostgreSQL 8.x MySQL 5.x Microsoft SQL Server 2005 or later (including Express Edition) Java Embedded Database Recommended platforms Ubuntu Server 8.04 or later CYAN Secure Web hardware appliances

15 Are you ready to dig deeper? We can help you move ahead with our network of professional integration and distribution partners. And let you tap into the experience we ve gained with small, medium and large customers in the public and private sectors, and in government. Sign up for a free trial subscription to CYAN Secure Web to see for yourself how you can gain a competitive edge in your market. Contact CYAN Network Security today to learn more. CYAN Networks Software GmbH Hainburger Strasse 34 A-1030 Vienna Tel Fax sales@cyan-networks.com 2010 Cyan Networks Software GmbH. All rights reserved. CYAN Network Security and CYAN Secure Web, are registered trademarks of CYAN Networks Software GmbH. All other trademarks and registered trademarks are the property of their respective owners.