Norman SecureSurf

1. Norman SecureSurf Protect your users when surfing the Internet

2. The challenge

3. A trend that we have observed is that hackers will insert their malicious code into legitimate JavaScript hosted on the website. - nakedsecurity.sophos.com The challenge Attackers often use websites to conduct phishing attacks or distribute malware(…) In many cases, these sites are legitimate websites that have been compromised by malware, SQL injection, or other techniques in an effort by attackers to take advantage of the trust users have invested in them. - Microsoft Security Intelligence report 14 “The Web has become the new threat vector of choice by hackers and cyber criminals to distribute malware and perpetrate identity theft, financial fraud and corporate espionage.” -- IDC • Legitimate sites are now the biggestsource of malware, safe surfing practices are not enough. • Even legitimate websites, inadvertently spreads malware or act as phishing sites • Ad networks • Exploited sites • Inserted malicious content • Drive-by infections

4. Avenues of Attack Source: Blue Coat Systems 2012 Web Security Report June 2012:9500 new malicious websites every day - Google • Top Five Categories for Entering Malware Networks by Percentage of Requests

5. The Solution: Norman SecureSurf • Easy-to-use Web Security solution for businesses of all sizes • Prevents web-based infections by monitoring websites for malicious content • Increase productivity of your company by regulating internet usage through category-based web filters. • User friendly interface including extensive statistics and reports. • Hosted service • No installation of software / hardware required • Set up on the fly, fully functional within hours

6. Why Norman SecureSurf?

7. Layered Security – Stronger Protection Prevent access to unwanted sites Protects against infections on allowed sites Increases the level of protection

8. Categorization – First line of defense Web Filter Secures The Network Environment Shopping Gambling Business Enforces Business-focused Internet Access IM Porn Security Reduces Liability Business Manages Bandwidth

9. Built-in malware protection Unprotected All traffic allowed to the end-users Protected with SecureSurf All Web addresses are tested against a continuously updated list of malicious websites, blocking them immediately

10. Easy administration Instant overview Intuitive interface Full control

11. Client protection Stay protected, even when you’re out of the office * Clear warning directly in web browser Clear end-user information * Requires local installation of SecureSurf agent

12. Why Web Protection as a Service? • Lower upfront costs • Ease and Speed of Deployment • No on-site hardware or software to maintain, upgrade, or support • Simply redirect Web traffic • Fixed operational expense instead of a capital expense • Protect your users, even when not in the office

13. Norman SecureSurf - features

14. Cloud-based Web Protection • Features & Benefits • Shields networks from malware, adware and viruses • Protects employees; improves productivity • Allows filtering at company or workgroup level • Easy set up and deployment • Intuitive browser-based Web Portal Access for Administrators

15. Customized filtering Pre-defined restriction groups Block or allow based on domain name, country or category Customize your own filter

16. Enforce Safe Search Enforce safe search on major search engines

17. Protect even when out of the office SecureSurf server Protect your network by enforcing SecureSurfDNS through DHCP or SecureSurf agent Protect remote users by enforcing SecureSurf DNSthrough SecureSurf agent

18. Agent allows for individual policies SecureSurf Block access on network level Agent allow for individual policies and protects mobile users when they’re not in the network

19. SecureSurf – Summary • Easy-to-use Web Security solution for businesses of all sizes • Prevents web-based infections by monitoring websites for malicious content • Increase productivity of your company by regulating internet usage through category-based web filters. • User friendly interface including extensive statistics and reports. • Hosted service • No installation of software / hardware required • Set up on the fly, fully functional within hours • SecureSurf agent • Protect your users, even when they’re not connected to the company network

20. In depth - technical

21. DNS redirection • SecureSurf is based on DNS redirection • DNS server checks if requester is known. • If known requester, it will filter • Malicious content • Domain and IP reputation • URL reputation • Zero-hour info • Categories based on filters

22. SecureSurf implementation • Network • Apply policies and filters to entire network • Every end user is protected by the same policy • Allows protection for multiple networks • Agent • Apply policies and filters to individual end users or groups • Allows for customization • Meets the needs of each department or employee • Great for remote users (e.g., Sales)

23. Policy is applied in order by User, Computer OR Network. SecureSurf Soft Components Policy Networks SecureSurf Computers Users Allow / Block Lists Multiple sources of reputation data are used. Tests Domain & IP Reputation URL Reputation Categorization engine tags requests based on the destination. Zero-Hour Categorization Actions Allow Proxy Block

24. Proxied blocked pages • When page blocked due to malicious content or category filter: • End-user will be re-directed to proxied web page • Including information on why page was blocked

25. Thank you