Websense

Network Protection > Server Filtering and Protection

Website Filtering System

Websense is a comprehensive security system for organizational networks to avoid the risks existing today as a result of user activity. The system includes various layers in order to provide total protection, from blocking access to hostile information sources, through filtering and controlling traffic in the network to full control over applications and user station connection abilities.

The challenges:

 78% of organizations are attacked by various dangers even though 99% have Firewalls and anti-viruses.
 The number of Spyware found on an average computer in a network is 28.
 About 70% of organizations transfer unfiltered information via instant messaging software.
 In large organizations, around 75% of the attacks are performed within the network, most without user knowledge.
 Services exist that require filtering, which run on Port 80. For example: P2P File Sharing.
 Various services in a network cause heavy load. For example: 44% of the users watch streaming media.
 There is a need to filter access to undesirable information sources on the internet, some of which are dangerous to information protection. 

Websense system provides a full solution by protecting a number of levels:

 Real-time updates to the system’s database, which contain a list of websites and applications divided into different categories.
 Application filtering by controlling over 50 categories for software existing in the market, and over 800,000 operation files divided into different categories.
 Filtering protocols by controlling over 60 protocols divided into categories, among them: Streaming media, remote access, IM and P2P.
 Designated module for broadband management.
 Filtering access to the internet by controlling over 90 different categories for website filtering in over 50 languages.
 In the existing database, over 10 million websites are divided into categories.

The Websense organizational protection solution includes a central server, which can be installed as a separate server or under top proxy servers, as well as under most existing Firewall solutions. The server receives real-time and daily updates from Websense, which include new websites, protocols and applications, divided into categories according to subject.
The system is costed as an annual service, according to the number of users who have internet access in the company.

The different modules that make up the Websense system:
URL Filtering
The Websense content filtering solution is based on an ever increasing database that contains over 10,000,000 websites, whereby this database is automatically updated daily with all the new websites that have been added to the network (over 5000 websites per day).
The websites are divided into more than 90 categories and sub-categories in over 50 languages. Based on the division into categories, the network manager, security manager or another management authority can block access to certain groups of users. As a result of adhering to content filtering policy, expense saving in efficient use of existing bandwidth and saving in expensive work hours is significant.
Monitoring and restriction can be performed according to category and sub-category, user groups and individual users, key words, specific URL, bandwidth capacity, file type, protocols, allocating quotas to all users for certain categories, and more.

Productivity PGTM, Bandwidth PGTM, Security PGTM

Premium GroupsTM are groups of categories with which it is possible to expand the basic content filtering module.
Security: Additional categories which allow controlling and blocking websites that contain hostile code types: Spyware, phishing, keylogging, and malicious mobile code and more.
Productivity: Categories of websites which are not connected to work: Payment websites, forums, e-commerce, and free software download websites.
Bandwidth: Categories of websites containing heavy information such as: Websites containing video/audio files, websites broadcasting radio or television via the internet, storage and backup websites, and file-sharing websites.

Client Policy Manager

The CPM is a designated software module, which is installed on the user station. This module allows protecting the workstation: Control over the applications which can be installed on the station; the network – control over the communication from the station to the network and the opposite; media – control over external media use, such as disk-on-key, CD, etc.

IM Protection

The Websense unique ability allows working with instant messaging software, but prevents actions like file transferring, sending videos, etc.

Real-Time Updates
SiteWatcherTM
BrandWatcherTM

Advanced services which include real-time database updating, sending messages when the company website is infected with a hostile code, as well as sending messages when an external entity performs phishing on the company website.