KasperskyWeb Traffic Security

Multi-layered anti-malware capabilities

• Multi-layered anti-malware - cloud-assisted via the Kaspersky Security Network

  Kaspersky Web Traffic Security incorporates the latest version of Kaspersky's award-winning anti-malware engine and is fed by real-time information from the cloud-based Kaspersky Security Network (KSN). The result is unequalled levels of gateway protection performance - detecting and removing dangerous objects, including exploits, malicious scripts and all other forms of known, unknown and advanced malware.

• Reputation-based filtering

  This technology detects suspicious and unwanted files and URLs, based on globally-acquired reputation data received from Kaspersky Security Network or its closed-loop version, Kaspersky Private Security Network.

• Malicious document detection

  Embedding malicious scripts into documents is a technique used in some of the most lethal malware recently developed, such as ExPetr/Petya/NotPetya. Kaspersky Web Traffic Security scans a whole range of document types, including MS Office files and PDFs, for any form of embedded malicious content. On detection, the infected file is blocked from opening.

• Detection of potentially harmful programs

  Using the extended protection option, the application can detect and delete not only known malicious programs, but also potentially harmful programs (such as spyware or remote administration kits).

• Ransomware protection

  Kaspersky Web Traffic Security protects against the broadest range of ransomware, including newly emerging, complex specimens.

Internet usage control

• Web control with categorization

  Categorization of web resources under more than 40 different groupings, based on our vast database of URLs, means that granular restrictions can be applied simply and accurately. Blocking URLs doesn’t require ‘SSL bumping’ even if the traffic is encrypted.

• Content filtering

  The transmission of files travelling in both directions through your internet gateway can be blocked according to filtering rules, based on the name (wildcards can be used), extension (using a format recognizer to counteract spoofing), size, MIME type and/or hash.

Data acquisition

• ICAP integration

  The product supports integration with proxy servers and storage via the ICAP and ICAP(s) protocols.

• Ready for encrypted traffic monitoring

  Where traffic monitoring (‘SSL bumping’) is implemented, and once the existing corporate proxy server has been configured, Kaspersky Web Traffic Security can control SSL-encrypted traffic and analyze objects (such as HTTPS web traffic objects) passing through the secured channel.

Deployment, performance, scalability

• Clustered deployment

  To handle large volumes of traffic in transit, Kaspersky Web Traffic Security supports cluster deployment, consisting of multiple traffic-processing nodes (servers). As traffic increases, more nodes can be deployed to keep everything secure.

• Secure Web Gateway (SWG) software appliance NEW

  An all-in-one, ready-to-use software appliance, complete with its own pre-configured proxy server, makes boosting your corporate IT network protection by adding a secure web gateway a no-brainer.

• Multiple workspace support

  Recognizing that rapidly growing, diversified businesses may wish to keep independent projects or branch offices separate and governed by their own policies – while retaining top level of all-encompassing policy-making and control - Kaspersky Web Traffic Security supports the use of multiple independent workspaces.

• Lean configuration deployment

  Where security fine-tuning isn’t necessary (such as for bulk traffic scanning in telco scenarios), a trimmed down configuration can add yet a further boost to performance.

Manageability

• Web-based administration console

  A web-based console is convenient for managing gateway security regardless of location –especially important for geographically distributed infrastructures.

• Role-based access control

  Differing restrictions can be applied to different administrative roles in terms of access to areas of the management console.

• Event management

  Threat analysis results are presented using an event-centric approach and show real-time activity. User internet behavior can also be analyzed.

• SIEM integration

  Gateway-level threat event information can be easily incorporated into the infrastructure-wide scope of events monitored via a corporate SIEM system.

• Multitenancy

  Multiple workspaces can be easily adopted for centralized management of multiple customer tenants, making Kaspersky Web Traffic Security a perfect choice for Managed Service Providers (MSPs)