WEB SECURITY SERVICE - Trustmarque€¦ · SYMANTEC WEB SECURITY SERVICE Threat protection •...

0845 2101 500 info@trustmarque.com www.trustmarque.com

At a glance

Web security and threat protection

• Protectinternettraffic,users,anddevicesviacloud-deliveredsecurityserviceusingthemarket’sleadingSecureWebGateway

• Setgranularpoliciestomanagewebinternetusagebyapp,device,userorlocation

• Usepowerfulwebthreatintelligencedatacombinedwithadvancedmalwarescanning

• Leveragestate-of-the-artsandboxingandwebisolationtoaddressadvancedthreats

Data protection & cloud control

• Usecloud-basedoron-premiseDLPoptions

• InspectSSLencryptedtraffictoensurecomplianceandsecurity

• SetCloudAccessSecurityBroker(CASB)policiestocontrolShadowIT,ShadowDataandmanagecloudcompliance

Management, visibility & reporting

• Defineconsistentpoliciesonceanddistributetocloudandon-premisegatewaysforenforcement

• Accesscentralizedvisibilityandreportingacrosscloudandon-premisegateways

• Monitorinternetusage,threats,incidents,etc.byuser,location,andapplicationinreal-time

Secure web gateway as a service

Enterprise’srapidadoptionofcloudservicesandincreasinguseofthewebisputtingpressureonexistingnetworksecurityarchitectures.Roamingusersandnewendpointdevicetypesaddsadditionalcomplexityandchallenges.Enterprisesecurityteamsmustgrapplewithaseriesofquestionsagainstthisnewbackdrop,suchas:

• How do we protect our users from an evolving threat landscape?

• How can we make sure our data is secured and maintains compliance with legal regulations?

• How do we effectively manage new types of devices and our mobile/remote users?

• How can we transition our own infrastructure to cloud without sacrificing functionality or flexibility?

The Symantec Web Security Service is designed to answer these questions. It provides the same proactive web protection capabilities delivered by the market’s leading on-premises Secure Web Gateway, the Blue Coat ProxySG, but delivered as a resilient and performant cloud security service. Sitting between your employees, wherever they are located, and the Internet, the service protects your enterprise from cyber threats, controls and protects corporate use of the cloud and the web, prevents data leaks, and ensures compliance with all of your company’s information and web/cloud access policies.

Web Security Service delivers web and cloud security from a diversified network of certified global datacenters. Since the Universal Policy Enforcement (UPE) capability allows administrators to define protection policies once and distribute them to all of their gateways, whether they are in the cloud or on- premises, enterprises can ensure consistent protection is in place. Its’ best-in-class feature set, combined with powerful integrated solution options and flexible subscription pricing model, have made Web Security Service the smart choice for companies looking for enterprise-class security capabilities ina cloud-delivered service.

WEB SECURITY SERVICE

SECURITY

0845 2101 500 info@trustmarque.com www.trustmarque.com

SYMANTEC WEB SECURITY SERVICE

Core capabilities

TheSymantecWebSecurityServiceenforcesgranularaccessandsecuritypoliciesthatmanagewebinternetusagebyapp,device,userorlocation.Enterprise-classfunctionalityincludes:

URL filtering and categorization

• Leverage12securitycategoriestoblock

• 90%ofallthreats• ClassifyURLsinoneof72categories

coveringover50languages• Dynamic,realtimeratingsforthelatest

information

Malware analysis service

• Leverageadvancedanalysis(staticcode,YARArules,behavioral)aswellasinline,real-timefileblockingtocombatthreats

• Utilizesandboxingtodetonatesuspicioussamples;coordinatewithWebSecurityServicetodelayfiledeliveryuntilanalysisiscomplete

Advanced threat protection

• Multi-layereddualanti-virusandheuristicanalysiscombinestoblockmalware

• UtilizecustomizedWhite-List/Black-Listcapabilitiesandfilereputationanalysis

Cloud access security broker (CASB)

• IdentifyShadowIT–identifythecloudsyourusersareaccessing;evaluatetherisksoftheseclouds(over15,000)byexaminingupto60attributesoneach

• Setaccessandcontrolpoliciesbasedoncloudattributedatainordertomanagerisk,addressthreatsandprotectinformation

User authentication

• IDuserswithupto14authenticationmethods

• Integrateacrossmultipleauthsystemsusedbyyourenterprise

Web isolation service

• Boostemployeeproductivitybyallowingprotectedaccesstouncategorizedorpotentiallyriskysites

• Increasebusinessproductivitybygivingemployeesaccesstoabroadersetof

• Securewebbrowsingforexecutivesandprivilegeduserswithaccesstosensitiveinformationandcriticalsystems

Universal connectivity

• Distributedglobaldatacentersprovidelocalcloudaccess

• Easilyconnectlaptops,mobiledevices,firewalls,proxiesandmore

Data loss prevention (DLP)

• Monitorandprotectsensitivedataonmobiledevices,on-premise,andinthecloudusingthemostadvancedDLPmatchingandrecognitionenginesonthemarket;orleverageyourexistingonpremiseDLPforyourweb/cloudtraffic

• ExtendyourDLPcoverageandgetdirectvisibilityandcontrolofcontentinover60cloudapps-includingOffice365,Box,Dropbox,GoogleAppsorSalesforce

Optional capabilities

Symantec has integrated the Web Security Service with other products in its broad security portfolio. These additional solutions include:

0845 2101 500 info@trustmarque.com www.trustmarque.com

SYMANTEC WEB SECURITY SERVICE

Strength in numbers –symantec global intelligencenetwork

TheSymantecWebSecurityServicetapsintotheSymantecGlobalIntelligenceNetwork,oneoftheworld’spremierciviliancyberdefensethreatintelligenceservices.Fedbythreatinformationfrom15,000enterprises,175millionconsumerandenterpriseendpoints,and3,000threatresearchersandengineers,thesolutioncategorizesandanalyzesthethreatsposedbyoverabillionpreviouslyunseenanduncategorizedwebsiteseachdayandover2billiondailyemailssent/receivedbyourcustomers.Symantec’suniqueexpertiseminimizesfalsepositivesandyoubenefitfromthenetworkeffectofjoiningover90%oftheFortune500asaSymanteccustomer,givingyouaccesstotheworld’smostpowerfulanalyticalthreatenginethatwillkeepyouastepaheadoffast-changingsecuritythreats.

Web security service fortoday’s enterprise realities

Mobileusers,remoteoffices,cloudapplicationadoption,increasingcomplianceobligationsandanevolvingandsophisticatedthreatenvironment–thenewrealityforenterpriseITandSecurityteams.Symantec’sWebSecurityServicegivesyoutheenterprise-classcapabilitiestoaddresstheserealitiesandensureyourwebandclouduseremainsefficient,effective,secureandcompliant.ItsprovenproxytechnologyleveragestheSymantecGlobalIntelligenceNetworktoensurereal-timeprotectionagainstknownandunknownweb-bornethreats.Withextensivewebandcloudapplicationcontrols,malwarescanning,datalossprevention,CASBservicesanddetailedreportingfeatures,theWebSecurityServiceenablesadministratorstocreateandenforcegranularpoliciesthatareinstantlyappliedtoallcoveredusers,includingfixedlocationsandroamingusers.

0845 2101 500 info@trustmarque.com www.trustmarque.com

SYMANTEC WEB SECURITY SERVICE

Threat protection• LargestCivilianGlobalIntelligenceNetworkfeeding

threatinformation(15Kenterprises,175Musers,3Kresearchers)

• Defaultbest-practicespolicies• DualAVengines• WebIsolationforsecurewebbrowsingofuncategorized

orriskywebsites• BackgrounddeepanalysiswithIoCresults*

Acceptable use controls• URLfilteringviagranularpolicies(byuser,group,

location,etc.)• Webapplicationblocking• CloudAccessSecurityBroker(CASB)discoveryand

reporting*

Data loss prevention• IntegrationwithSymantecDLPCloud*• Integrationwith3rdpartyDLP,includingon-premiseDLP

software*

Reporting & visualization• Customizabledashboardswithdrill-downinformation• Preconfiguredandcustomreporting• Scheduledreportingandtriggeredalertswithe-mail

delivery

Symantec web security service capabilities

Controls on SWG logging• ControldataremovalbyrestrictionsonAuthorization

Levelorlocation• Configurabledataretentionperiod(2-365days)*

Authentication• LeverageWindowsActiveDirectory(AD)without

requiringchanges• SupportforSAMLv2(PostandRedirectbindings)

Encrypted traffic inspection• CompliantpracticesforSSL/TLSencryptedtraffic

interception,decryptionandinspection• EmploysSecureCA,withSymantecPKIhostedRoot

andIntermediateCAs• ServerCertificateAuthorityvalidationwithrevocation

checking

Connection methods• Secureconnectionmethod• Unsecuredproxyaccess• IPsecconnection(PSKandCertificatemethods)• HardenedAgent(Windows®andMac®OS)*

Cloud infrastructure• Allglobaldatacentersavailabletoenterpriseusers• Regionaldatacenteravailableforreporting• ISO27001andSSAE-16SOC3certifications

About Symantec and TrustmarqueAtTrustmarque,weofferin-depthtechnicalexpertiseacrossSymantec’ssolutions,protectingallareaswithinyourbusiness,includingdata,servers,virtualmachines,mobiledevicesandendpointstodelivercomprehensivesecuritysolutions.