Corporate immunity: we create a system of centralized management of network security in the company and its branches

The rules of the game have changed. Yesterday we specialized in solutions for small and medium-sized businesses, and not due to the fact that we had any technical limitations, but only because the market was dominated by heavyweights in the IT industry. Our software was simply not viewed by corporations as a comprehensive security solution, although they installed Traffic Inspector to protect individual offices and small units.

But since the middle of 2014, due to changes in market conditions and sanctions policies of Western companies, our office has increasingly received requests for the possibility of combining our software and hardware devices into a single solution for corporations. As a result, we have developed a new product, Traffic Inspector Enterprise - a comprehensive security system for an extensive network running a single console.


')
So how did we come to this?

Companies with an extensive network require centralized management of network resources. We received such a request from our long-standing client. Solving this problem in trivial ways with the help of our 12-year developments in the field of information security was not possible. But at the same time, it is forbidden to say “no” to our company in our company - for 10 years we have the “Healthy denial of the impossible” rule.

Conditions of the problem

A large enterprise with a distributed branch network needs a set of tools that, together with centralized management, will allow monitoring the network security of remote offices and increasing the efficiency of the staff with Internet access. At the same time, the system should be simple and quickly mastered by a new operator, follow the same safety rules, be controlled from the head office and solve a number of applied tasks:

• distribution of Internet traffic between users;
• monitoring the effective work of users on the web;
• comprehensive protection against viruses and other external threats;
• generating reports at the request of the parent organization.

As the basic elements of the system, we used time-tested modules based on Traffic Inspector and supplemented them with a central console, which is installed at the head office of the enterprise and allows you to distribute security policies to network gateways (located in branches and provide protection and control of network security at remote locations).

Central management console

The management console is a key component of the system, which is installed in the main office. Below is a screenshot of the settings for connecting the child server to the managing "brain" when working with the central console:



Navigation is very convenient. For example, this is the list of remote servers of a distributed network:



The assignment of a certain group of users to the company's servers is as follows:



It took us 3 months to implement the prototype. We created a system that united the branch network of the enterprise into a single security complex, which made it possible to solve all the tasks set by the client. Below is a little more detail about the main features of Traffic Inspector Enterprise .

Main features

Using Traffic Inspector Enterprise, you can set up centralized management of users on your corporate network:
You will be able to transmit information between the head office and branches and collect all statistics on users' work on the web in one place.

The program provides wide opportunities for centralized distribution of policy for remote branches from the head office.

• Managing user access to the Internet allows you to limit the speed of groups and individual users, as well as set rules for allowing and denying access to resources according to the following parameters:
  
  - Lists of IP addresses and / or domain names
  - URL lists written using regular expressions
  - Contents of web pages
  - Type of information (text, media, etc.)
  - Resource categories
  
  
• Transfer to the remote offices of the created objects to configure user access. These include:
  
  - IP networks;
  - URL lists;
  - Content categories;
  - Lists of ports;
  
  
• Distribution of firewall rules defining allowed and denied connections established through the gateway;
• Transferring SMTP gateway settings;
• Transfer proxy settings.

The central office can also collect and store various information, including:

• Detailed network statistics on users, user groups. This includes the analysis of resources visited by users, and data on content filtering and blocked requests;
• Monitoring the network activity of users of all branches in real time;
• Storing network statistics for all branches in an external database at the head office.

Additional "buns"

In addition, useful minor functions are available for the client, which ensure the safety of work on the network and increase employee productivity:

• Protection against viruses spread through the Internet at the stage of passage through the gateway;
• Spam protection. Blocking junk mail during the passage through the gateway;
• Block banners, online advertising, pop-up windows in users' browsers.

Bandwidth support: up to 500 Mbps
Support up to 8000 users on the LAN

Each client has its own tasks: someone needs control of Internet access, someone needs centralized management, someone needs everything at once. The advantages of our software solution in its versatility. It as a constructor consists of reliable and time-tested elements, from which you can create any system for centralized management of network security for a specific request of our client. We are ready to conduct an online demonstration of Traffic Inspector Enterprise. To do this, you need to fill out a small form on our website.

Thank you for your attention, we are ready to answer your questions in the comments.