What is UTM?

NETASQ has developed a full range of UTM (Unified Threat Management) appliances to meet the security needs of all types of network structures.

NETASQ appliances include all the necessary functions for the effective protection of small, midsized and large enterprises, service providers and remote users (real-time intrusion prevention, network and application firewall, advanced content filtering, embedded KASPERSKY antivirus, antispam, antispyware, URL filtering, IPSEC and SSL VPN and bandwidth management).

NETASQ UTM appliances have been tailored around a unique real-time intrusion prevention technology - ASQ.

The ASQ technology offers multi-layer security protection that prevents attacks on the network and on contents without compromising performance and throughput.

NetASQ - Active Security Qualification

• Protects against unknown attacks and vulnerabilities
• Anti-spoofing (behaving as another computer)
• Protection from poor coding (buffer overflows & double encoding of URL’s)
• Fragmentation attacks

Contextual Analysis

• Protect against known vulnerabilities
• Once vulnerability established then it protects against variants
• Controls specific content against misuse
• Will block Spy-ware

Heuristic Analysis

• Normal protocol going to the correct device using good commands
  - Blocks remote control
  - Blocks Trojans & backdoors
  - Block mal-ware sending data

Hackers will use HTTP (web surfing) to control Trojans on remote computer. Only heuristic analysis can detect this

Content Filtering

• Anti-Spam
  - Control the junk email
  
  
• Anti-Virus
  - Protect systems from viruses
  
  
• Web filter
  - Manage websites visited
  
  
• Anti-Spyware
  - Protect machines from software downloaded by users
  
  
• Quality of Service (QoS)
  - Manage internet access for some or all users

• VPN with client application - IPSEC
  - Software installed on operating system
  - Requires IT department to manage

Remote Access

• VPN with existing application - PPTP
  - Software already installed on O/S
  - Needs to be configured by IT department

• VPN without client application - SSL
  - No software to install
  - Any PC, any where
  - Any browser on any Operating System

• Public Key Infrastructure (PKI)
  - Using shared keys for authentication
  - Know the user who connects is the user you expect

• Certificate of Authority (CA)
  - Use the NetASQ firewall as a root server
  - The user connected knows you’re the company they expect

• Secure Socket Layer (SSL)
  - Allowing secure connection via any web browser
  - Allowing users to conduct secure transactions

Management Suite: Complete solution

• Firewall Manager
• Firewall Monitor
• Event Reporter
• Global Administration
• Automatic reports