McAfee Web Gateway

McAfee Web Gateway Overview:

As web use continues to grow and evolve with Web 2.0, web-borne malware attacks continue to grow and evolve as well. McAfee Web Gateway (formerly Webwasher) lets your business take advantage of Web 2.0 capabilities while remaining in control of enterprise security. Web Gateway offers powerful, proactive protection against blended threats, spyware, and targeted attacks.

Description:

McAfee Web Gateway — the #1 rated anti-malware solution for Web 2.0 threats — analyzes the nature and intent of all content and code entering the network via requested web pages, providing immediate protection against malware and other hidden threats.

Unparalleled threat protection — Powered by layered security that combines local and cloud-based protection, you can count on McAfee Gateway Anti-Malware Engine for automatic malware protection and up-to-the-moment McAfee global reputation intelligence to stop zero-day threats, spyware, and targeted attacks — without a signature — before they can enter your network. Granular control stops the threat, such as an infected iframe, while still enabling access to the rest of the site. McAfee combines this local, real-time intent analysis with comprehensive McAfee anti-virus protection to quickly block known viruses, giving organizations complete coverage and optimal performance.

Powerful safeguards against data loss — Scan user-generated content on all key web protocols, and prevent confidential or suspect information from leaking out of your enterprise through blogs, wikis, and other Web 2.0 applications and sites.

Easy, efficient management — With Web Gateway, you can stop deploying and managing multiple standalone web products. Web Gateway integrates numerous protections, from web filtering and anti-malware to SSL scanning and content control, all with a simplified management footprint and a flexible policy engine. Therefore, you can share a single security policy across protections and protocols, and meet the needs of your entire organization, enhancing protection while saving time and money.

Agile infrastructure and performance — Web Gateway includes a high-performance, enterprise-strength proxy that provides the flexible authentication, administration, and authorization controls required by today’s most-demanding enterprises and service providers. Numerous deployment options — from appliances and blades to VMware — ensure Web Gateway scales to your environment needs.

The comprehensive McAfee Web Gateway solution comprises:

• Proxy/cache
• Category and reputation-based web filtering
• Anti-malware
• McAfee Anti-Virus
• Anti-spyware
• SSL scanning
• Data leakage protection
• Reporting

Benefits and Features:

Web Gateway Solutions:

Say “Yes” to Web 2.0 While Protecting against Today’s Blended Threats

Organizations can do more over the web today than ever before. Often referred to as Web 2.0, today’s web offers a dynamic, real-time user experience. Static information has given way to blogs, wikis, podcasts, RSS feeds, and other interactive applications and user-generated content. Enterprises are taking advantage of these innovative capabilities to do business in more efficient, collaborative ways.

As use of the web continues to grow and evolve with Web 2.0, web-borne malware attacks continue to grow and evolve as well. The good news is that McAfee can enable your enterprise to say “yes” to Web 2.0 capabilities while taking control of enterprise security. We offer powerful, proactive protection against the blended threats, spyware, and targeted attacks that are a predictable part of doing business in a Web 2.0-enabled world.

Widely deployed reactive security solutions—such as signature-based anti-virus and category-only URL filtering—are still important for blocking “known bad” behavior and content. But these reactive techniques were never designed to combat Web 2.0 exploits. For example, they can’t prevent attacks that entice users to unwittingly click on a link that downloads a virus designed to evade signature-based detection, or attacks that hide malicious code within seemingly good HTTP or HTTPS traffic. And since today’s malware attacks are increasingly targeted at specific organizations, the ability to proactively block unknown as well as known threats has become crucial.

McAfee understands the security needs of the Web 2.0 world like no other vendor, and offers the industry’s most complete, proactive solution: McAfee® Web Gateway (formerly Webwasher).

Complete Inbound and Outbound Protection

McAfee Web Gateway appliances deliver comprehensive security for all aspects of Web 2.0 traffic. For user-initiated web requests, McAfee Web Gateway first enforces an organization’s Internet use policy. For all allowed traffic, it then uses local and global techniques to analyze the nature and intent of all content and active code entering the network via the requested web pages, providing immediate protection against malware and other hidden threats. And unlike basic packet inspection techniques, McAfee Web Gateway can even examine SSL traffic to provide in-depth protection against malicious code that has been disguised through encryption.

To secure outbound traffic, McAfee Web Gateway scans user-generated content on all key web protocols—including HTTP, HTTPS, and FTP. Integrating with McAfee DLP solutions, it protects against loss of confidential information and other threats leaking from the organization through blogs, wikis, and even online productivity tools such as organizers and calendars.

McAfee Web Gateway Delivers the Industry’s the Industry’s Best Protections

• #1 rated malware protection for Web 2.0 Threats – McAfee Web Anti-Malware, Gateway Edition uses proactive intent analysis to filter out objectionable content from web traffic. By scanning a web page’s active content and understanding its intent or predicted behavior, the Anti-Malware add-on proactively protects against blended threats and targeted attacks. McAfee Web Gateway combines this proactive threat protection against unknown malware with a comprehensive, signature-based anti-virus engine to block known malware. Combining both capabilities provides the industry’s best defense against malware. In fact, independent researchers have awarded McAfee Web Gateway top scores for accurately detecting and blocking more than 99 percent of malware.*
   
• Reputation-based security through TrustedSource ™ technology – McAfee has set a new standard for proactive detection through TrustedSource, our industry-leading global reputation system. Relying on extensive knowledge of Internet entities and the constantly changing global threat landscape, the TrustedSource network identifies potentially malicious behavior worldwide, enabling McAfee enterprise security solutions to block these threats based on the source’s reputation score.
   
• TrustedSource’s unrivaled effectiveness is a direct result of McAfee’s unique view into enterprise mail and web traffic. By accumulating data from over 10,000 sensors located in more than 82 countries, TrustedSource creates a profile of all activity on the Internet across multiple protocols, using this profile to detect deviations from expected behavior. The system then generates a reputation score based on the behavior of the host. This score is incorporated into McAfee Web Gateway, enabling organizations to reject unwanted traffic before it enters the network.
   
• McAfee ® Web Reputation Database – McAfee Web Gateway delivers the best protection available through the powerful combination of both reputation- and category-based filtering of web traffic. Through the McAfee Web Reputation Database, a repository for all global Internet data gathered by McAfee, TrustedSource has a rich data store for calculating reputation scores and category placement. With more than 90 categories to choose from and the added security provided through TrustedSource reputation scores, McAfee Web Gateway offers web filtering unmatched in coverage, accuracy, and security.
   
• Protection for encrypted traffic – Sophisticated cyber-criminals have turned to SSL traffic (HTTPS) as the new back door through the enterprise’s security barrier. Ironically, a protocol designed to provide security must now also be secured against abuse, just as traditional HTTP traffic must be secured. McAfee Web Gateway is the first security product that fully integrates malware detection, SSL inspection, and certificate validation. There’s no need to route encrypted traffic to a separate box for malware inspection. McAfee Web Gateway directly scans all SSL traffic to ensure the complete security, integrity, and privacy of encrypted transactions.
   
• Data leakage protection (DLP) – McAfee Web Gateway protects organizations from outbound threats—such as leakage of confidential information—by scanning outbound content over all key web protocols, including SSL. This makes McAfee Web Gateway an essential tool for preventing intellectual property loss, ensuring and documenting regulatory compliance, and providing forensic data in the event of a breach. For organizations with advanced DLP requirements, McAfee Web Gateway integrates with McAfee DLP solutions to provide unparalleled data leakage protection.

McAfee Web Gateway Delivers: Agile Infrastructure and Performance

McAfee Web Gateway is a high-performance, enterprise-strength proxy appliance that provides the caching, authentication, administration, and authorization controls required by today’s most demanding enterprises. With multiple appliance models to choose from—all with integrated high availability—McAfee Web Gateway delivers the deployment flexibility and performance you need, along with the scalability to easily support hundreds of thousands of users in a single environment.

McAfee Web Gateway appliances are pre-installed with a proven default configuration that allows fast, easy, and error-free deployment. Policy changes in complex, multi-appliance environments are easy to manage, and a variety of dashboard reports always keep you in-the-know, displaying the current health of the appliance and providing instant snapshots of filtering performance.

With support for numerous integration standards, McAfee Web Gateway is designed to work in your unique environment. From the Web Cache Communication Protocol (WCCP) to the Internet Content Adaptation Protocol (ICAP), McAfee Web Gateway efficiently communicates with other network devices and security appliances, including McAfee’s data-leakage solutions and a wide range of industry-standard proxy/caching devices.

McAfee Web Gateway Delivers: Value

McAfee Web Gateway combines and integrates numerous protections that would otherwise require multiple stand-alone products. Web filtering, anti-virus, anti-spyware, SSL scanning, and content control filtering—you can get all of these protections in a single, cost-effective appliance. And a simplified management footprint means that a single security policy can be shared across protections and protocols, saving valuable time and money.

McAfee Web Gateway Delivers: Compliance

McAfee Web Gateway includes powerful reporting capabilities – an element that’s essential to the utility of any web filtering solution. McAfee Web Reporter, gives you the instant information you need to understand how your organization is using the web, comply with regulations, identify trends, isolate problems, document inappropriate web activity, and tailor your filtering settings to enforce your web usage policies. It combines real-time views and drill-downs into today’s web traffic with powerful off-line processing—everything you need in one easy-to-use solution. And it scales to meet the reporting needs of even the largest global corporations.

Available in both basic and premium versions, McAfee Web Reporter offers a choice of features and capacity to suit your organization’s size and reporting requirements. The basic version offers very robust reporting capabilities and is available for no charge with any McAfee Web Gateway license. McAfee Web Reporter Premium, Gateway Edition offers additional capabilities, including:

• Delegated reporting – Reduce the IT burden by distributing reporting responsibilities across the organization. You can allow or restrict access to specific data, enabling administrators to share reporting responsibilities while staying within defined boundaries.
   
• Powerful, advanced reporting capabilities – Configure highly detailed, custom reports to help identify trends and issues. You can even combine multiple queries into a single report or dashboard view to get detailed reporting results addressing specific areas of interest.

McAfee Web Reporter Premium, Gateway Edition provides the advanced detail
and flexibility many organizations need. Multiple graphs and tables from different
queries can be combined into a single report or dashboard view.

The McAfee Web Gateway security dashboard provides instant
snapshots of your organization’s web traffic without running a report.

Licensing Options for Gateway Protections

McAfee Web Security, Gateway Edition: strong protection for inbound and outbound traffic
McAfee Web Security, Gateway Edition protections are enabled through a choice of licensing options. The baseline solution, McAfee Web Security, combines the accuracy and breadth of reputation-based web filtering with McAfee Anti-Virus to provide bidirectional web security.

This combination, only available for McAfee Web Gateway, creates the most powerful web filtering solution available today. It prevents malicious content from entering your network and significantly reduces the productivity losses, bandwidth consumption, and legal risks caused by unauthorized employee access to inappropriate or distracting web content. And you can specify policies that apply across all modules and are valid for all web, SSL, and FTP traffic—greatly simplifying policy management compared to multiple, stand-alone security solutions. For permitted web traffic, McAfee Web Gateway provides anti-virus scanning of return web traffic (HTTP, HTTPS and FTP) with McAfee Anti-Virus powered by AVERT labs.

McAfee Web Anti-Malware, Gateway Edition: The Solution for Web 2.0 security threats
Worried about targeted and zero-day attacks via Web 2.0? Upgrade to McAfee Web Anti-Malware, Gateway Edition, the number-one rated solution for Web 2.0 security. This add-on builds on the web filtering and anti-virus protections available with McAfee Web Security by adding additional layers of defense. With McAfee Web Anti-Malware, Gateway Edition, you’ll receive an additional signature-based anti-virus engine for known malware along with the in-depth intent analysis of our proactive security filters to detect blended attacks and unknown traffic with malicious content. Deep content inspection makes sure that malware is reliably detected even if hidden deep in compressed or spoofed files.

System Specifications:

 

Documentation:

Download the McAfee Web Gateway Datasheet (PDF).

Download the McAfee Web Gateway Appliance Specifications Datasheet (PDF).