All-in one security for large and medium-sized businesses.

Size: px

Start display at page:

Download "All-in one security for large and medium-sized businesses."

Toby Doyle
5 years ago
Views:

1 All-in one security for large and medium-sized businesses

2 Overview UserGate UTM provides firewall, intrusion detection, anti-malware, spam and content filtering, and VPN capabilities in one integrated package that can be installed and updated easily. Firewall Intrusion Detection and Prevention Application Control (Level 7) Advanced Threat Protection Gateway Antivirus Content Filtering Mail Security VPN server

It provides many security features and is able to easily add new network defense capabilities through

3 How it works UserGate UTM works as a web security gateway and can be installed on any physical or virtual server machine. It provides many security features and is able to easily add new network defense capabilities through security subscriptions. Numerous policies can be used to grant or restrict access to specific website categories, monitor downloads or application use, set traffic quotas, and keep detailed statistics.

4 Enhanced Network Security Protect your network against: Intrusions External attacks DDoS attacks Viruses Trojans Malware Dangerous websites

Advanced Threat Protection Safeguard your company against advanced persistent threats and dangerous websites using real-time code analysis and reputation services.

5 Advanced Threat Protection Safeguard your company against advanced persistent threats and dangerous websites using real-time code analysis and reputation services. UserGate UTM includes features such as: Analysis of all incoming traffic (files, scripts etc.) Deep Content Inspection Reputation services Adware blocking The product also features a built-in Kaspersky Lab antivirus module that scans all web and FTP traffic, attachments, and downloads.

6 Efficient Web Access Management Control over access to websites, Web 2.0 content, downloads, and streaming media Bandwidth management and application monitoring SSL traffic decryption Mobile device control, bring-your-own-device support Transient users support Optional authorization agent for Terminal Services and Windows users Support for multiple authentication protocols: LDAP, Kerberos, Radius, Captive Portal

caching Guaranteed bandwidth for business-critical

7 Better Internet Performance Support for multiple ISPs Failover support Load balancing Bandwidth management Web caching Guaranteed bandwidth for business-critical applications Internet application control High Availability Mode support

UserGate UTM protects your privacy by blocking the invisible tracking cookies and

8 Protecting your privacy Facebook, Google, and hundreds of other advertising networks and data collection sites track you as you browse the Web. UserGate UTM protects your privacy by blocking the invisible tracking cookies and plug-ins on many websites and preventing social networks from transmitting data about you after you leave those sites.

9 Performance Testing UserGate UTM on the platform powered by 2x Intel Xeon-E3 yields the following results: Throughput performance UserGate UTM with proxy and firewall 8.5 Gbps + IDPS 4 Gbps + L7 1.5 Gbps + Web filter 1.3 Gbps + Antivirus 1.2 Gbps + VPN 300 Mbps

10 LAN High Availability Mode IP 1, trusted zone IP cluster IP 2, trusted zone High Availability Mode allows you to greatly reduce the risks and damages that could be caused by a UTM hardware crash. UTM 1 Untrusted zone UTM 2 Untrusted zone Deploying UserGate UTM in a High Availability pair allows for continuous uptime of the UserGate UTM services in the event that one of the nodes fails. Internet

11 Virtual appliance or hardware appliance UserGate UTM can be delivered as a virtual suite or hardware suite. The product is also compatible with the Amazon Web Services EC2 platform, so it can be launched in Amazon Cloud.

12 Licensing UserGate UTM is licensed based on the number of simultaneous users (i.e. IP addresses) that can connect devices to it. For example, a license for 100 users allows 100 devices with unique IP addresses to be connected at any given time. The 101st user and any that follow will not be able to obtain internet access. There is no limit to the number of user accounts that can be in the system. The basic license for the product has no expiration date (without updates). 1. Security Updates (SU) Subscription includes updates to UserGate UTM software, OS updates, a subscription to IDPS (attack signatures) database updates, a subscription to L7 (application signatures) database updates, and technical support for UTM. *A one-year subscription to the Security Updates module is included in the basic UserGate UTM license. Once the first year expires, it must be renewed. 2. Advanced Threat Protection (ATP) Module includes a subscription to Entensys URL filtering 3.0, a subscription to Entensys white/black lists, a subscription to morphological databases, the Entensys Cloud Antivirus engine, and the ad-blocking module. 3. Kaspersky Antivirus Module includes a subscription to Kaspersky Antivirus. 4. Mail Security Module includes cloud-based anti-spam, antivirus scanning, and support for other methods for filtering unwanted .

13 Alternatives UserGate UTM can efficiently replace various existing, well-known solutions. UTM

14 Use Cases Providing Internet Security: protection against online threats, viruses, malware, and intrusion attacks. Content filtering for any organization. Bandwidth management, application control: limit bandwidth to users, applications, and protocols. Ensure the optimal operation of critical services. Content filtering: block dangerous, illegal, and non-work-related content. Internet access for guests: user authentication, policy enforcement for guest users and third-party devices, BYOD (Bring Your Own Device) concept support. Public WiFi access: UserGate UTM provides authentication and online security for transient users while filtering illegal websites. Text message authorization is also supported.

15 Used in Business: secure Internet access, traffic management, application access policies for banks, insurance, transport and trading companies, telecommunications operators, energy companies, and others. Government organizations: secure Internet access, traffic management, and application access policies for governments and health care facilities. Branch offices: ensure secure IT infrastructure for remote offices and construct a secure virtual network. Universities and other educational institutions: block dangerous, illegal, and harmful content and implement regulatory requirements for universities, colleges, and libraries. Telecom: provide services and online security in operator networks, creating a clustered, scalable solution that works under high load. Public WiFi networks: block dangerous, illegal, and harmful content and implement regulatory requirements for public Internet access hotspots in cafes, restaurants, hotels, airports, and other transport facilities.

16 Entensys Founded in 2001 Entensys s development office is located in the Siberian Taiga near Novosibirsk s "Academic Town and close to several dozen scientific institutes. In June 2015 Entensys won SW Awards Europe s Excellence Award in the category of Threat Solutions: Best Web Content Management. Technology partners:

UserGate UTM 4. Administrator's Guide. Entensys Administrator's Guide

UserGate UTM 4. Administrator's Guide. Entensys Administrator's Guide UserGate UTM 4 Administrator's Guide www.entensys.com Content Introduction... 5 Network security and protection from network threats... 5 Firewall... 5 Detection and prevention of intrusions... 5 Cloud-based