Specific solutions for CP Secure content security gateway

A product import and export company in Jiangsu has about 800 internal network users, two private lines for Internet access, one directly connected to the mail server, and the other one connected to the internal Internet. The company ’s employees ’daily Internet access traffic is particularly heavy, and because they are foreign trade companies, there are so many communications with foreign countries that the company ’s email communications are staggering. Because of this, the latest viruses in the world can quickly spread to the company In the network, it brings hidden dangers to the normal operation of the enterprise, and at the same time, the confidential information inside the enterprise is even more precarious.

Faced with such a large and complex network environment, the company's network management personnel realized that network security will become a top priority for ensuring the company's normal operation. Therefore, the company installed a firewall and installed a desktop antivirus product for each machine. However, because the company often communicates with foreign countries, more viruses or malicious programs targeting foreign users often cause harm to the import and export company's network, and at the same time cause economic losses to the company, and some domestic security products against these foreign viruses and malicious programs The poor results have caused the import and export company ’s business processing efficiency to be low and the normal work of its employees severely affected. Due to certain defects in the old security products, network administrators cannot effectively solve the above problems. Therefore, due to the particularity of the network environment, the company decided to find effective solutions in hardware security gateway products after research and discussion.

CP Secure engineers learned about this situation and learned in detail about the company's network structure and existing problems, and analyzed and judged the company's security risks and protection directions through the following aspects:

External? Because every computer of the company can access the Internet, various malware from the Internet can infect these machines and affect the entire network of the company, especially spyware, Trojans, and virus intrusion are frequent and have serious consequences.

Internal? The number of various application servers in the LAN is large, and the number of clients is relatively large. These are very vulnerable to virus infection. Viruses are attacked in a variety of ways: spread through a local area network, traditional media (CD-ROMs, USB drives, etc.), etc. Once a server or client is infected, it will spread quickly, infecting the entire network, and seriously threatening the company's daily Operation. Mail is one of the company's main contact and business handling methods, so there are a lot of mails, and spam is very rampant, accounting for 3/4 of the total mail. Employees spend a lot of time and energy every day on screening and processing spam. Reduced work efficiency, but was helpless.

Bandwidth consumption? Today's popular viruses have strong network attack capabilities and can quickly spread, occupying the limited bandwidth of the company's network, causing network switches, routers, and servers to be severely overloaded, causing the network to be paralyzed. For example, viruses such as CodeRed, Worm King, and Shockwave are typical viruses that cause network paralysis.

Information stolen? After the outbreak of most network viruses, it will not only directly destroy the transmission of information on the intranet and paralyze the network, but also may release backdoor programs. Once the server with important information is poisoned, the company's confidential information may be stolen, causing serious consequences.

Indirect loss? The virus outbreak may directly lead to the loss of the company's information assets, resulting in the company's business not being able to develop normally. If the company is affected by a virus accident for a long time, it may cause the company's credibility to decline, which will seriously affect the company's operation and development.

CP Secure provides solutions:

Based on the above situation, CP Secure engineers designed a set of effective solutions for the deployment of the import and export company at the gateway-setting up a CP Secure content security gateway CSG1000 +.

First, port grouping was done for the company, and two dedicated lines and two channels were respectively scanned for protection, which greatly saved network resources. The scanning functions of several major communication protocols such as HTTP, SMTP, POP3, and FTP are all turned on, and the scanning range is wide and deep.

CSG's most troublesome spam emails are swept away by CSG's latest unique graylisting technology. The gray list technology has an intelligent authentication system, which can determine whether it is spam based on the sender's IP address information, which greatly reduces the workload of network administrators and eases the pressure of a large amount of spam on the user's network system.

CSG1000 + is based on CP Secure's unique patented "stream scanning technology", which integrates CP and Kaspersky's dual scanning engine and virus database. It can provide the company with fast, comprehensive and safe protection; CSG1000 + is equipped with multiple Gigabit optical ports and electrical ports. The rich interface types make CSG1000 + adapt to the requirements of various network segments and can be set to dual channel mode for simultaneous protection Two subnet segments, for example, can protect the company's local area network to prevent the spread of malware on the internal network, and can also provide comprehensive protection for the mail system at the same time. The WEB management interface based on HTTPS can help network administrators to manage the CSG equipment safely on any computer in the enterprise.

Implementation effect of the scheme:

After a period of use, CSG blocks about 300 malware such as viruses, Trojan horses, and spyware every day. This import and export company has an average daily mail volume of around 30,000. CSG's anti-spam module blocks an average of 21,000 spam emails, and there are no accidental deletions. This efficient spam processing function completely solves the user's worries, greatly reducing the complicated work of network management personnel, and other employees of the company also save a lot of time, improve work efficiency, and no longer be bothered by those spam emails. Not only that, through the implementation of this solution, two IP users were detected within the network and spam emails were continuously sent to the outside to find and stop in time.

CSG1000 + 's dual-channel port grouping saves a lot of resources for users and improves office efficiency. CSG's superior protection against spyware also makes users more at ease about the security of their confidential files. The speed of CSG1000 + 's response to the latest malware prevention and the update of virus database also make users more at ease in their network environment.

CSG's dual scanning engine and virus library sweep away viruses and malicious code. Both malicious programs aimed at Chinese users and harmful programs designed for foreign users will be uprooted under CSG's dual scanning engine.

The company's network environment is safe and reliable, and all employees have focused on their main business, no longer distracted from dealing with spam, and no longer worry about the theft of their confidential documents, while saving a lot of network resources Has improved the work efficiency of employees.