Websense Web Security Gateway Solutions

Overview:

 

Web security gateway: Simple, effective, affordable.

The Websense security gateway family of products gives you complete web security that:

• Goes beyond antivirus solutions with composite risk scoring technology that combines multiple advanced analytics – including reputation analysis, real-time browser code scanning, and data fingerprinting – to knock out today's advanced threats.
• Has embedded, enterprise-class DLP controls that keep secure content from leaking out without giving you the hassle from false positives that plague "lite" DLP products.
• Classifies individual pieces of content within websites, so your employees can use the dynamic web without contaminating your networks with unwanted content.
• Consolidates web, email, and data security into one unified architecture for the most comprehensive security you can get at the lowest overall cost

Dynamic, interactive Web 2.0 technologies have transformed the Web into a core business application platform. Traditional customer relationship and payroll applications are now delivered interactively over the Web, while applications like social networking are used on a daily basis for recruitment, lead generation, and other business processes. Along with Web 2.0, however, comes new risk as dynamic and user-generated content renders traditional security technologies, such as antivirus and URL filtering, ineffective. These technologies also do not provide control over sensitive outbound data posted to Web 2.0 sites.

 

Websense® Web Security Gateway solutions lead the Secure Web Gateway market by providing the best protection against modern Web 2.0 threats with the lowest total cost of ownership (TCO). They are the only solutions to provide enterpriseclass data loss prevention and unified management of hybrid cloud/on-premise deployments. Web Security Gateway solutions enable organizations to leverage the power of Web 2.0 without worrying about Web malware, inappropriate content, or disclosure of sensitive information.

 

 

How It Works

Web Security Gateway solutions inspect inbound and outbound content as it traverses organizational boundaries to protect businesses from dynamic Web malware, prevent sensitive outbound data loss, and enhance employee productivity. Websense TruHybrid™ deployment supports on-premise appliance as well as Security-as-a-Service (SaaS) platforms, while managing the entire environment from a single policy and reporting infrastructure. Unlike alternative approaches, Websense customers have the flexibility to choose the platform or mix of platforms that best meets their specific operational requirements without incurring the cost of managing multiple systems.

Websense Web Security Gateway solutions offer:

• Outbound Data Loss Prevention and Compliance Controls – Built-in enterprise-class data loss prevention establishes the controls needed to enable outbound communications to destinations like Web mail and social networks, while meeting compliance mandates to control disclosure of sensitive data.
• Malware Protection – The Websense TRITON™ Advanced Classification Engine (ACE) protects against legacy file-based attacks as well as dynamic, scripted attacks that circumvent traditional antivirus solutions.
• Web 2.0 Employee Productivity – The TRITON Advanced Classification Engine removes inappropriate content from complex, dynamic, and password-protected Web 2.0 sites that cannot be accurately classified by traditional URL filtering solutions.
• Lowest Total Cost of Ownership (TCO) – The Websense TRITON Console and TruHybrid deployment reduce the number of appliances, management systems, and vendors that must be supported across the enterprise.
• Consistent, Enterprise-Wide Security Coverage – TruHybrid deployment unifies policy across on-premise and SaaS deployments. As users move between locations

Key Features:

Websense keeps you safe on the web.
You've got to work on the web, but it's dangerous out there. No worries: With Websense® Web Security Gateway, you can fearlessly post on Facebook, take advantage of web apps, and use the wonders of the web to build your business.

Here's what you need for the best web protection.
Websense, as the industry leader in web security, knows exactly what will keep your company safe on the web. Here's what you need (and what you get with Websense):

• Real-time security scanning defends against zero hour attacks that cleverly use web scripts as well as blended threats that go far beyond the scope of antivirus products.
• Real-time content classification examines individual content within sites, like inappropriate posts from complex, fast moving sites like Facebook so your employees can use the dynamic web without bringing security risks into your network.
• Enterprise-class data loss prevention (DLP) ensures policy compliance for sensitive data yet lets your employees safely send communications to web destinations such as web mail and social media.
• Hybrid deployment combines on-premise solutions (such as high-performance appliances) with in-the-cloud services to reduce complexity, boost employee productivity, and give you the lowest cost possible.
  

 

Your business is unavoidably social.
Following competitors' tweets. Checking out LinkedIn updates. Posting company news on Facebook. These are legitimate uses of the social web at work. And, with intertwined work/life schedules, people need to check their personal home pages during the day.

But the social web can spin out of control.
Do you mind if an employee keeps a link to eBay open? What if a home page has an RSS feed from a gambling site? Or worse? Somehow, you need to enable the social web while protecting your workplace from inappropriate activities.

You need freedom within limits on the social web.
Websense Advanced Classification Engine (ACE), gives you an industry-exclusive way to allow social web use at work:

• When traditional security solutions encounter, say, a Facebook page, they classify it in the broad category of "social networking"
• By contrast, ACE analyzes each page within a social site, allowing acceptable content through and keeping inappropriate content out.

 

Get rid of complexity and expense. Get Websense.
Stand-alone DLP requires multiple boxes that cost an arm and a leg and give you endless annoyances. TruWeb DLP™ offers you one solution that's embedded right into our web security products for enterprise-class protection.

Data is gold. Guard it.
50% of data thefts occur on the web. 39% of malicious web attacks include data-stealing code. Cyber thieves steal names, numbers, and other data then sell it at huge profits. Websense TruWeb DLP™ is the only enterprise-class data loss capability offered in a web security solution today.

Stand-alone "lite" DLP just doesn't do it.
If you've tried security solutions with "DLP Lite" capabilities, you know they require constant tweaking to give workers enough freedom while still protecting the data. Plus, they inundate you with false positives that you spend days trying to track down.

You need enterprise-class DLP.
Websense offers TruWeb DLP, enterprise-class DLP controls embedded right into our web security products. TruWeb DLP gives you:

• Extremely high accuracy with fewer false positives
• Thousands of predefined data classifiers
• Hundreds of compliance policy templates
• Natural language processing
• Data fingerprinting
• Workflow

On-premise. In the cloud. One or both.
Websense TruHybrid™ deployment gives you unified management of web security regardless of how you set it up. You get maximum flexibility to choose a mix that best fits your requirements. Websense has the only solution anywhere that:

 

• Offers both SaaS and on-premise options, AND
• Single-console operation, no matter which setup you choose

 

Separate security solutions don't share.
Legacy security products target one problem at a time. Working separately, they don't share information when a security risk arises. Today's blended web attacks have no trouble slipping between the cracks to access your data.

ACE puts it all together for a unified solution.
Websense Advanced Classification Engine (ACE) combines the latest technologies into unified content security analysis. ACE detects the latest threats in real time, catching hundreds of viruses and other dangers that stroll right through separate solutions.

 

What do you do for redundancy?
What's your plan to ensure security uptime? Shut down access for a few days? Or go ahead and work without web security? Maybe you have redundant appliances, a strategy that works but that few can afford to purchase or maintain.

You need a solution that's simple and low-cost.
Websense Hybrid High Availability provides redundancy in the cloud. If your on-premise appliance goes down, traffic automatically routes to the cloud. You save IT resources and cut your overall costs.

 

 

Add Defensio for social security.
If you're using a Websense web security product, also consider using Websense TRITON™ Defensio™ service. This will extend protection to your personal and corporate blogs, Facebook, and other social media pages. Defensio technology helps you:

• Keep malicious content off your site
• Filter out profanity
• Prevent posting of links to objectionable websites, such as pornography
• And more. Get more info on the Defensio service.

Features & Benefits:

 

Features	Benefits
TruHybrid Deployment	Reduces total cost of ownership (TCO) and ensures consistent policy across the enterprise through unified management of on-premise and SaaS deployments.
Enterprise-Class Data Loss Prevention	Prevents outbound data loss and establishes required compliance controls. Lowers TCO by avoiding a complex DLP deployment.
Real-Time Content Classification	Secures use of dynamic, password-protected, and mixed content Web properties through Web content filtering “on the fly.”
Real-Time Security Scanning	Protects organizations from Web malware by identifying dynamic, scripted, and unknown threats “on the fly.”
TRITON Console	Reduces TCO and vendor management costs through unified management of Web, data and email security solutions.
Integrated Antivirus	Protects against file-based virus attacks using both third-party and advanced Websense Web antivirus.
Leading Web Filtering with Advanced Reputation Analytics	Enables baseline acceptable use policy and blocks known malicious sites. Multipoint reputation analytics include property type, lexical reputation, Web 2.0 posts, URL category, nearest neighbor, search reputation, history, age, and geography.
ThreatSeeker Network Real-Time Updates	Reduces exposure to emerging threats by delivering security updates every five minutes.
SSL Visibility	Enables inspection of encrypted Web traffic with full SSL proxy and integrated certificate management.
Application Control	Minimizes risk, enhances productivity, and lowers bandwidth cost by managing use of network protocols and applications.
Enterprise-Class Web Proxy /Cache	Improves performance and reduces bandwidth cost by optimizing traffic. Supports both transparent and explicit proxy configurations.
Flexible User Authentication	Enables user and group-based policy with flexible authentication via Active Directory, LDAP, RADIUS, Novell,NTLM v2.
High Availability and Load Balancing	Enables system redundancy and large-enterprise scalability leveraging WCCP or external load balancers.

Deployment Availability:

 

All Websense® web security gateway solutions
give you comprehensive web security, including protection against:

• Social media threats
• Zero-hour attacks

Our products also offer:

• Single console setup
• Easy upgrade to expand coverage
• Significant cost savings over multiple independent solutions

 

Refer to the chart below to see which of our three packages best fits your needs.
Product	Why it's unique	Who might choose this package
Web Security Gateway Anywhere	Websense exclusive: This is the only web security product anywhere that offers enterprise-class data loss prevention (DLP) so you can: Send messages safely via web mail and social media Conduct web searches and visit websites without risking data loss Meet compliance mandates for protecting sensitive data Websense® TruHybrid™ deployment gives you unified management of security regardless of the setup you choose: on-premise, in the cloud, or both. Also includes all Web Security Gateway and Hosted Web Security Gateway features listed below.	Companies who want the most comprehensive DLP plus flexible options for setup: In the cloud OR On premise with V-Series appliances or software OR Hybrid: in the cloud and on premise
Web Security Gateway (Software)   Web Security Gateway (Appliance)	Websense exclusive: This is the only web solution that examines the actual content in real time on Facebook pages, YouTube posts, and other networking sites. This live-action protection catches and blocks harmful content picked up in web communications.	Companies who want an on-premise solution that uses Websense software on Company systems OR Websense V-Series appliances
Hosted Web Security Gateway	Offers Web Security Gateway features with in-the-cloud deployment.	Companies who want comprehensive web security without the headaches of on-premise deployment, maintenance, and upgrades.

Product Comparison:

 

	Web Filter		Web Security		Web Security Gateway
	Express	Web Filter	Web Security	Hosted Web Security	Hosted Web Security Gateway	Web Security Gateway	Web Security Gateway Anywhere
Leading Web Filtering Database
Advanced Application Controls
Centralized Policy & Reporting
Leading Web Security Database
Real-time Security Updates
Web Reputation Services
Anti-virus
Enterprise Web Proxy
Real-time Content Classification
Real-time Security Scanning
TRITON™ Console
TruHybrid™ Deployment
TruWebTM DLP
Remote Filtering	*	*	*			*
Deployment Platforms
V-Series Appliances
Security-as-a-Service (SaaS)
Software

*Remote Filtering may be purchased as an optional add-on to these products.

Documentation:

Download the Websense Web Security Gateway Solutions Datasheet (.PDF)

Download the Websense Product Comparison (.PDF)