Ds Web Gateway

8/3/2019 Ds Web Gateway

1/4

Data Sheet

McAee Web Gateway

Common Criteria EAL2+ certifed

Leader in Forrester Wave:

Web Filtering 2009

Leader in Gartner Magic Quadrant,

Web Gateway or three years runningNumber one-rated anti-malware

solution on the market (AV-Test.org)

Number one web gateway appliance

market share (IDC) two years in a row

Radicati Top Player

Network WorldClear Choice

Winner 2009

Information SecurityReaders Choice

Award 2009

SC Magazine Best Anti-Malware

Solution 2010

AsWeb2.0applicationuseandsophistication

increases,sotoodoestheneedforexibleaccess

coupledwithWeb2.0-readysecuritybecauseeven

seeminglysafesitescanbetargetedformalware

distribution.TheMcAfeeWebGatewayappliance,

ouron-premiseswebsecuritysolution,istherstline

ofdefenseforanyorganizationtoprotectagainst

evolvingmalwarethreats.Thisnext-generation

securewebgatewayempowersorganizationsto

enableemployeeaccesswhilegreatlyreducing

anorganizationsriskwithanadvancedsecurity

approachthatcombinespowerful,localintentanalysiswithcloud-basedprotectionpowered

byMcAfeeLabs.

Intodaysworld,simplyblockingknownviruses

fromdownloadingorrestrictingaccesstoknown

badwebsitesisnotenough.Reactivetechniques,

suchassignature-basedanti-virusandcategory-

onlyURLltering,wereneverdesignedto

enableWeb2.0accessorcombatWeb2.0

exploits.Thesimpleblockingapproachoffered

bythesesolutionsmeansentirepagesoreven

domainscanbeblockedratherthanthespecic

maliciouscodeorobject,hinderingproductivitywhilegeneratinghelpdeskcalls.Andsincethese

solutionsfocusonknowncontentandmalicious

objectsorexecutables,theycantpreventtodays

attacksthathidemaliciouscodewithinseemingly

goodHTTPorHTTPStrafcorprovideprotection

againstunknownoremergingthreats.Theability

toenablesecure,granularaccesstoWeb2.0

applicationswhileproactivelyblockingunknown

aswellasknownthreatsisnowcrucial.

McAfeeunderstandsthesecurityneedsofthe

Web2.0worldlikenoothervendorandoffers

theindustrysmosteffective,provenproactive

solution:McAfeeWebGateway.

Complete Inbound and Outbound Protection

McAfeeWebGatewaydeliverscomprehensive

securityforallaspectsofWeb2.0trafc.Foruser-

initiatedwebrequests,McAfeeWebGatewayrst

enforcesanorganizationsInternetusepolicy.For

allallowedtrafc,itthenuseslocalandglobal

techniquestoanalyzethenatureandintentofallcontentandactivecodeenteringthenetworkvia

therequestedwebpages,providingimmediate

protectionagainstmalwareandotherhidden

threats.And,unlikebasicpacketinspection

techniques,McAfeeWebGatewaycaneven

examineSSLtrafctoprovidein-depthprotection

againstmaliciouscodethathasbeendisguised

throughencryption.

Inboundprotectionalsomitigatesrisksfororgan-

izationshostingwebsitesthatacceptdataor

documentuploadsfromexternalsources.McAfee

WebGatewayinreverseproxymodecanscanallcontentbeforeitisuploaded,securingboththe

serverandthecontent.

Tosecureoutboundtrafc,McAfeeWebGateway

scansuser-generatedcontentonallkeyweb

protocolsincludingHTTP,HTTPS,andFTPand

protectsagainstlossofcondentialinformationand

otherthreatsleakingfromtheorganizationthrough

socialnetworkingsites,blogs,wikis,andevenonline

productivitytoolssuchasorganizersandcalendars.

McAee Web GatewaySay yes to Web 2.0 while protecting against todays evolving threats

Organizationscandomoreoverthewebtodaythaneverbefore.Oftenreferred

toasWeb2.0,todaysweboffersadynamic,real-timeuserexperience.Static

informationhasgivenwaytosocialnetworkingsites,blogs,wikis,RSSfeeds,

interactiveapplications,anduser-generatedcontent.Enterprisesaretaking

advantageoftheseinnovativecapabilitiestodobusinessinmoreefcient,

collaborativeways.


2/4

Data Sheet McAee Web Gateway

McAfeeWebGatewayalsosafeguardsagainst

unauthorizeddataleavingtheorganization

throughbot-infectedmachinesattempting

tophonehomeortransmitsensitivedata.

McAfeeWebGatewayalsoallowsenterprisesto

extendandenforcetheirsecuritypoliciesonmobile

devices.Todayspopularsmartphonesandtablets

includingBlackBerry,AppleiPhone,AppleiPad,

andAndroidcandirectwebtrafctoMcAfeeWeb

Gatewaythroughstandarddevicemanagement

andsecuritycontrols,ensuringmobiledevicesare

securedwithadvancedanti-malwareprotection

andcorporateweblteringpolicies.McAfeeWeb

Gatewayalsoextendsprotectiontomobiledevices

accessingcontentthatistraditionallyavailableon

internalcorporateserverssuchasintranets,wikis,

MicrosoftSharepointservers,andotherweb-based

solutions.Whilethisinformationisgenerallynot

madeavailabletocertainmobiledevicesdueto

securityconcerns,McAfeeWebGatewaysetup

asareverseproxycanenablecontrolledandsecure

accesstotheseinternalresources.

McAee Web Gateway Delivers the Industrys

Best Protection

Asthenumberone-ratedmalwareprotection,1

McAfeeWebGatewayusesapatent-pending

approachtointentanalysiswiththeMcAfee

GatewayAnti-MalwareEngine.Proactiveintentanalysisltersoutmaliciouscontentfromweb

trafcinrealtime.Byscanningawebpages

activecontent,emulatingandunderstandingits

behavior,andpredictingitsintent,McAfeeWeb

Gatewayproactivelyprotectsagainstzero-day

andtargetedattacksastheyoccur.

McAfeecombinesthislocal,real-timeintent

analysiswithcomprehensiveMcAfeeanti-virus

protectiontoquicklyblockknownvirusesand

severalcloud-basedtechnologiesallpowered

byMcAfeeLabs.

McAee anti-virus with real-time McAeeGlobal Threat Intelligence (McAee GTI) fle

reputationWithcloud-based,McAfeeGTIle

reputationlook-upcapabilities,McAfeecloses

thegapbetweenvirusdiscoveryandsystem

update/protection.ThisenablesMcAfeeWeb

Gatewaytoprovidegreaterprotectionwhile

optimizingsecurityonasingleplatformwith

different,yetcomplementary,technologies

somethingmanyorganizationswantfortheir

defense-in-depthsecurityapproaches.

McAee Global Threat Intelligence web reputation

and web categorizationMcAfeeWebGateway

deliversenhancedweblteringfunctionalityand

protectionthroughthepowerfulcombination

ofbothreputationandcategory-basedltering.

McAfeeGTIpowersMcAfeeWebGateways

weblteringtechnologies.McAfeeGTIcreates

aproleofallInternetentitieswebsites,email,

andIPaddressesbasedonhundredsofdifferent

attributesgatheredfromthemassive,global

datacollectioncapabilitiesofMcAfeeLabs.It

thenassignsareputationscorebasedonthe

securityriskposed,enablingadministratorsto

applyverygranularrulesaboutwhattopermit

ordeny.McAfeeWebGatewayoffersexpanded,

cloud-basedwebreputationcapabilitiesthat

nowincludegeo-location,enablinggeographicvisibilityandpolicymanagementbasedonthe

webtrafcsoriginatingcountry.

Forbothwebcategorizationandsecurity-focused

webreputation,organizationscannowchoose

betweenon-premisesandcloudlook-upsora

combinationofboth.Cloudlook-upseliminate

protectiongapsbetweendiscovery/changeand

systemupdateandoffersignicantlyenhanced

coveragewithdataonmorethan100millionURLs.

Protection or encrypted trafc

SophisticatedcybercriminalshaveturnedtoSSLtrafc(HTTPS)asthenewbackdoorthroughthe

enterprisessecuritybarrier.Ironically,aprotocol

designedtoprovidesecuritymustnowalsobe

securedagainstabuse,justastraditionalHTTP

trafcmustbesecured.McAfeeWebGateway

istherstsecurityproductthatfullyintegrates

malwaredetection,SSLinspection,andcerticate

validation.Theresnoneedtorouteencrypted

trafctoaseparateboxformalwareinspection.

McAfeeWebGatewaydirectlyscansallSSLtrafc

toensurethecompletesecurity,integrity,and

privacyofencryptedtransactions.

Data loss prevention

McAfeeWebGatewayprotectsorganizationsfrom

outboundthreatssuchasleakageofcondential

informationbyscanningoutboundcontentover

allkeywebprotocols,includingSSL.Thismakes

itanessentialtoolforpreventingintellectual

propertyloss,ensuringanddocumentingregula-

torycompliance,andprovidingforensicdatainthe

eventofabreach.Fororganizationswithadvanced

1 Web Gateway Security Appliances for the Enterprise: Comparison of Malware Blocking Rates, Feb 2011, http://www.mcaee.com/

websecuritycomparison


3/4


datalossprevention(DLP)requirements,McAfee

WebGatewayintegrateswithMcAfeeDataLoss

Preventionsolutionstoprovideunparalleleddata

lossprotection.

Mobile fltering or remote users

Astheworkforcebecomesmoredistributedand

mobile,theneedforweblteringandprotection

toseamlesslytransitionfromtheofcetothe

roadbecomesincreasinglyimportant.McAfee

WebGatewaycustomerscannowtakeadvantage

ofSiteAdvisorEnterprisesoftwarewithweb

lteringforendpointstobothprotectandcontrol

webaccessformobileusers.Thisintegrated,

gateway-awaresolutionintelligentlyenforces

theappropriatepolicy,whethertheenduseris

atacorporateofceandbehindMcAfeeWebGatewayoroutsidethenetwork.

McAee Web Gateway Delivers Control

McAfeeWebGatewayenablestodaysweb-centric

enterpriseswithapowerfulnewrules-basedengine

foroptimalpolicyexibilityandcontrol,easily

enablinghierarchicalrulestobeimplementedfor

themultitenancyneedsoflargemanagedservice

providersandserviceproviders.Tostreamlinepolicy

creation,McAfeeWebGatewayoffersanextensive

pre-builtruleslibrarywithcommonpolicyactions.

Organizationscanpickandchoosevariousrules,

easilymodifytheserules,andsharetheirownrulesthroughanonlinecommunity.

TheMcAfeeWebGatewayplatformextendspolicy

exibilityandcontroltowebapplicationsaswell,

enablinggranular,proxy-basedcontroloverhow

webapplicationssuchaspopularinstantmessaging

applicationsareused.Organizationscanenableor

disablespecicfunctionalityasneeded,controlling

whousesawebapplicationandhowitisused.

DoyouwanttoenableaccesstoFacebookbut

notallowgames?Noproblem.Thecombination

ofexiblepolicycreation,advancedanti-malware

scanning,andwebreputationalsomeansthatMcAfeeWebGatewaycanremovemaliciouslinks

(basedonreputationorcategory)fromawebpage

orextractonlythemaliciouscodewhileletting

thebalanceofthepagedisplayfullyoptimizing

productivityandgranularWeb2.0security.

Webgatewayexibilityandcontrolalsoextends

touserauthenticationandaccess.McAfeeWeb

Gatewaysupportsnumerousauthentication

methodsincludingNTLM,RADIUS,AD/LDAP,

eDirectory,cookieauthentication,Kerberos,or

alocaluserdatabase.TheMcAfeeWebGateway

authenticationengineallowsadministratorsto

implementexiblerules,includingtheusemultiple

authenticationmethods.Forexample,McAfeeWeb

Gatewaycantrytotransparentlyauthenticatea

userandbasedontheresultprompttheuserfor

credentials,useanotherauthenticationmethod,

applyarestrictivepolicy,orsimplydenyaccess.

McAfeeWebGatewayextendsaccesscontrolto

streamingcontentthroughnativestreamingproxy

supportaswell,providingbandwidthsavingsand

reducedlatency.

McAee Web Gateway Delivers Agile

Inrastructure and Perormance

McAfeeWebGatewayisahigh-performance,

enterprise-gradeproxythatprovidesthecaching,

authentication,administration,andauthorization

controlsrequiredbytodaysmostdemanding

enterprises.Offeringmultipleappliancemodels

allwithintegratedhighavailabilityandsupport

forvirtualizedmachines,in-the-cloudservice

withMcAfeeSaaSWebProtection,andevena

bladeoption,McAfeeWebGatewaydelivers

thedeploymentexibilityandperformanceyou

need,alongwiththescalabilitytoeasilysupport

hundredsofthousandsofusersinasingleenviron-

ment.(FormoreinformationonSaaSorlarge

datacenterdeployments,seetheMcAfeeSaaSWebProtectionorMcAfeeContentSecurityBlade

ServeronMcAfee.com.)

WithMcAfeeWebGatewayexibility,youcanmix

deploymentoptionsaswell.Forexample,youcan

ofoadportionsofwebtrafctothecloudduring

peaktimesforaddedhighavailabilityperformance

orusethishybridmodelasacost-effectivefail-

overoption.

McAfeeWebGatewayoffersnumerousimplemen-

tationoptionsfromexplicitproxytotransparent

bridgeandroutermodestoensurethatyour

networkarchitectureissupported.

Withsupportfornumerousintegrationstandards,

McAfeeWebGatewayisdesignedtoworkin

youruniqueenvironment.Fromthewebcache

communicationprotocol(WCCP)totheInternet

contentadaptationprotocol(ICAP),McAfeeWeb

Gatewayefcientlycommunicateswithother

networkdevicesandsecurityappliances,including

McAfeeDataLossPreventionsolutionsandawide

rangeofindustrystandardproxy/cachingdevices.


4/4


McAee, the McAee logo, McAee Global Threat Intelligence, McAee GTI, McAee Labs, SiteAdvisor Enterprise, McAee ePolicy Orchestrator, and

McAee ePO are registered trademarks or trademarks o McAee, Inc. or its subsidiaries in the United States and other countries. Other marks and

brands may be claimed as the property o others. The product plans, specifcations and descriptions herein are provided or inormation only and

subject to change without notice, and are provided without warranty o any kind, express or implied. Copyright 2011 McAee, Inc.

25300ds_web-gateway_0411_nl_ASD

McAee

2821 Mission College Boulevard

Santa Clara, CA 95054

888 847 8766

www.mcaee.com

Additionally,McAfeeWebGatewaynowoffersIPv6

support,helpinglargerorganizationsandfederal

institutionscomplywithregulations.McAfeeWeb

GatewaybridgesthegapbetweeninternalIPv4

andexternalIPv6networksandappliesallavailable

securityandinfrastructurefeaturesandfunctions

tothetrafc.

McAee Web Gateway Delivers Value and

a Platorm or the Future

McAfeeWebGatewaycombinesandintegrates

numerousprotectionsthatwouldotherwise

requiremultiplestandaloneproducts.Web

ltering,anti-virus,anti-spyware,SSLscanning,

andcontentcontrollteringyoucangetall

oftheseprotectionsinasingle,cost-effective

appliance.Andasimpliedmanagementfoot-printmeansthatasinglesecuritypolicycanbe

sharedacrossprotectionsandprotocols,saving

youvaluabletimeandmoney

McAee Web Gateway Delivers Security Risk

Management and Reporting

Themostpopularandrespectedsecurity

managementtechnology,theMcAfeeePolicy

Orchestrator(McAfeeePO)platform,isnow

supportedbyMcAfeeWebGateway.Asthe

singlesourceforconsolidatedinformation,the

McAfeeePOplatformhelpsyouquicklyidentify

andmitigateproblemsandimprovecompliancemanagement.Expandyoursecurityriskmanage-

mentcapabilitiesandreachbyviewingMcAfee

WebGatewayinformationinyourMcAfeeePO

console,receivingactionablereports,viewing

systeminformation,andmore.

McAfeeWebGatewayincludesadditionalreporting

capabilitiesaswell.McAfeeWebReportergives

youtheinstantinformationandforensictoolsyou

needtounderstandhowyourorganizationisusing

theweb,complywithregulations,identifytrends,

isolateproblems,documentinappropriateweb

activity,andtailoryourlteringsettingstoenforceyourwebusagepolicies.Itcombinesreal-time

viewsanddrilldownsintotodayswebtrafcwith

powerfulofineprocessingeverythingyouneed

inoneeasy-to-usesolution.Anditscalestomeet

thereportingneedsofeventhelargestglobal

corporations.

Availableinbothbasicandpremiumversions,the

McAfeeWebReportersoftwareoffersachoiceof

featuresandcapacitytosuityourorganizationssize

andreportingrequirements.Thebasicversionoffers

robustreportingcapabilitiesandisavailableforno

chargewithanyMcAfeeWebGatewaylicense.

McAfeeWebReporterPremium,GatewayEdition

offersadditionalcapabilities,including:

Delegated reportingReducetheITburdenby

distributingreportingresponsibilitiesacrossthe

organization.Youcanalloworrestrictaccessto

specicdata,enablingadministratorstoshare

reportingresponsibilitieswhilestayingwithin

denedboundaries.

Powerul, advanced reporting capabilities

Congurehighlydetailed,customreportstohelpidentifytrendsandissues.Youcaneven

combinemultiplequeriesintoasinglereportor

dashboardviewtogetdetailedreportingresults

addressingspecicareasofinterest.

Licensing

Fortheultimateindeploymentexibilityand

tohelpfutureproofyourinvestment,McAfee

offersallfeaturesoftheMcAfeeWebGateway

andMcAfeeSaaSWebProtectionServiceina

singleasuite:McAfeeWebProtection.Deploy

onpremises,inthecloud,orbothforadded

deploymentexibilityandhighavailabilitythechoiceisyours.Youllndaward-winning

McAfeeanti-malwareprotectionandcompre-

hensiveweblteringwitheitheroption.

McAfeeWebGatewayhardwareissoldseparately.

Documents

Ds Web Gateway