EdgeWave iPrism Deployment
Comprehensive, policy-driven Web Security

Network Fit:

iPrism Web Security simply fits in networks of all shapes and sizes.

• Scales both large and small.
• Distributed or centralized.
• Mixed networks including Terminal Services.

All configurations build on one or both of our two core modes of installation:
Transparent Bridge Mode	Proxy Mode
From there, you can introduce...
Citrix Deployment	Multi-site Deployment
And scale for size and complexity...
Complex Multi-site School Deployment	Complex LAN

Transparent Bridge:

Our exclusive transparent bridge deployment delivers powerful Web security that won't introduce latency to your network traffic no matter how busy your network gets. Even networks with the largest pipelines are easily managed by our combination of seamless in-line deployment and kernel-level filtering technology.

Installing an iPrism Web Security appliance in its typical Transparent Bridge Mode has several benefits:

• It combines the accuracy and security of pass-through filters with the speed of a pass-by or sniffer-type solution, giving you the best of both worlds:
  • Pass-thru traffic is securely monitored defeating any attempts to circumvent the Web filter
  • Pass-by traffic is picked up and pages are blocked according to your organization's policies
  • Kernel-level filtering means the appliance is not acting in proxy mode and latency is never introduced into the process
• Flexible transparent deployment means the EdgeWave Web Security appliance can still function as a direct proxy when deployed in Transparent Bridge Mode.
  • Functioning in both modes simultaneously allows greater flexibility in deployment.
  • Proxy functionality is available for multi-user workstations or as an alternative to our Remote Filtering solution for remote users who may not use the same gateway to the Internet as on-site users
• Because all traffic flows over the Transparent Bridge, features and functionality that take advantage of this visibility can be easily downloaded to the Web filter
• Single Point of Failure issues are eliminated with the Bypass Module on the NIC because any problems with the Web filter will not affect normal network operations or performance
• As a stand alone appliance with no additional software or servers required, iPrism Web Security has greater flexibility in adapting to a wide range of network scenarios involving mixed platforms, legacy systems and other variants

Terminal Services:

If you're a Citrix user, your environment can cause special challenges when you need to deploy an Internet filtering solution. Recent tests conducted by Citrix engineers confirm that the iPrism Web Security solution surpasses all competitors in its ability to easily integrate within a Citrix environment without degrading performance. That's why Citrix has proclaimed our solution the only Citrix Ready appliance-based Web Filter on the market.

iPrism Web Security Offers Significant Advantages in Citrix Environments

Citrix Partner - Citrix Ready One of the main reasons that iPrism Web Security is the only Citrix Ready appliance based Web filter and ideal for your Citrix environment is our unique auto-login feature. When this feature is deployed, users are allowed to maintain their productivity without incessant authentication requests. This ensures that uniform policy application and enforcement are being enabled across your organization.

• Our unique "session based" authentication technology allows you to use Auto-login and greatly simplify the authentication process
• Our technology allows Citrix users to easily apply unique policies to individual users and document their activity
• This authentication feature is enabled without installing any software on the Citrix or AD servers
• Our technology ensures consistent policy application whether Citrix users are Web surfing from their desktop or via Citrix systems
• If you require more aggressive security because of the shared nature of terminal server clients, you can easily configure iPrism Web Security to require manual authentication.

Deploying iPrism Web Security in a Citrix Environment is easy

It only takes a few steps to install iPrism Web Security in your Citrix environment:

1. Install our appliance upstream of your Citrix server, and inline with your Firewall
2. Create profiles and policies in the Appliance Manager
3. Enable auto-login
4. Establish session-based authentication for Citrix
5. Block, monitor and report on all thin/fat client use

iPrism Web Security Offers 5-Star Features

• Antivirus - Includes a powerful, four-factored antivirus engine at no extra charge
• IM and P2P protocol management
• Spyware, malware and phishing blocking (hourly updates)
• Comprehensive drill-down own reporting and real-time monitoring
• Authentication - Active Directory and LDAP Authentication simplify IT administration tasks
• 100% human reviewed database
• Mobile and Remote Filtering - Easily extend AUP and security policy enforcement to your mobile and laptop users
• Delegated Administration - Assign administrative tasks to others in your organization

Remote Filtering:

iPrism Web Security offers a Hybrid Remote Filter that employs proprietary technology to bring powerful Web filtering to all your users, regardless of their location, without using your VPN, deploying anything in the DMZ or requiring any PAC file implementations. iPrism Web Security eliminates browser latency while delivering secure and comprehensive Web access management to all your off-premises users.

Using a combination of the Remote Filtering Client for both Windows 32/64-bit and Mac, and powerful elastic data center cloud service, iPrism Remote Filtering, with centralized administration and reporting, is a true hybrid solution that allows you to enforce your corporate AUP across all employees whether they are on-premises or accessing your network remotely. And our unique hybrid technology keeps total cost of acquisition (TCA) and total cost of ownership (TCO) the lowest in the Industry.

iPrism Remote Filtering Delivers Simplicity, Value and Performance:

• Easy set-up and provisioning: Once you install the Remote Filtering Client software, you can manage and report on remote users easily from iPrism's browser-based central management console. And unlike solutions from other vendors, iPrism eliminates administrative burdens:
  • No additional system modules to install off-box
  • Eliminates the insecurity of copying users' directory service credentials off-premises
  • No emails required to educate roaming users on self-provisioning
• Secure Client-Based Hybrid Technology: Unlike other vendors that rely on PAC file-based hybrid solutions, iPrism uses lightweight, low-latency, tamper-proof and application-agnostic client software. This eases the burden on IT Admin resources:
  • Eliminates the need to restrict users' workstation privileges
  • No need to restrict application usage
  • No changes to or restrictions on users' browser proxy settings
• Accurate Off-Premises Policy Enforcement: The iPrism Remote Filtering client is location aware, which means you can apply and enforce the same or a different policy for roaming users, whether on- or off-premises relative to the corporate network. This also allows users to negotiate captive portals encountered at wireless hotspots such as airports, hotels, coffee houses and others.
• Centralized Administration and Reporting: Real-time monitoring and drill-down reporting work the same for your remote users as for those on-premises. You can run separate reports on remote users, isolate an individual remote user or include remote users in regular company-wide reports.
• Bandwidth Conservation - No Latency: Unlike other remote Web filters, iPrism helps conserve your bandwidth, because there are no VPN tunnels and no deployments in your DMZ to hog network bandwidth so low latency is assured.
• Distributed Data Center: A nationwide network of powerful, distributed data center cloud services supports iPrism's Remote Filtering so your users never encounter availability issues.

How iPrism Web Security Works

Our unique hybrid approach to remote filtering includes communications between the Web Filter and the Remote Filtering Client. The data center cloud service functions as a go-between, making sure the Web filter remain secure and conserving bandwidth.

iPrism Remote Filtering Establishes Policy
The iPrism Remote Filter defines policies for your remote users in accordance with your acceptable use policy (AUP). These policies are then pushed to the Data Center, where they are stored securely and confidentially to be applied to your remote clients once they are enabled.

Cloud Center:

The EdgeWave Secure Content Management Portfolio uses elastic in-the-cloud data centers that deliver proven resources to assure optimum scalability and availability of iPrism, EdgeWave's Email Security, Archiving, Hybrid Remote Filtering and other cloud-based services. In addition, cloud services deliver iPrism upgrades, iGuard URL updates and Circumvention Defense Network updates, including Bot detection. These proven data centers offer built-in failure resistance and redundancy, and are designed to isolate themselves from common failure scenarios. You can be certain that you will be able to enforce policies with your remote and roaming users as efficiently and accurately as you manage your on-premises employees.

Our Data Center Cloud Service Offers:

Elasticity - Cloud service data centers easily scale to handle the biggest pipelines and usage peaks so latency is never an issue.

Flexibility - Cloud services, are OS agnostic and will integrate seamlessly no matter what platform you are using

Reliability - Our in-the-cloud data centers have a proven infrastructure and a highly reliable environment where replacement instances are rapidly and predictably commissioned. With an SLA committed to 99.95% availability, you can count on accurate AUP enforcement for all employees 24/7/365, no matter where they are when they access your network.

Security - The cloud service data centers used by EdgeWave are committed to following security best practices including:

• Data Privacy - Your privacy is assured not only because of the built-in privacy and encryption capabilities, but because none of your organization's proprietary data is stored in-the-cloud. Once the client is deployed on your remote machines, event logs are stored there while iPrism does the URL monitoring and blocking. The in-the-cloud data service functions as a go-between enabling communication between your iPrism and the remote client.
• Physical Security - Distributed data centers are housed in secured locations with badge-only entrances and continuous video surveillance. This assures that only authorized, verified personnel have access to our data centers.
• Certifications and Accreditations - Data centers have successfully completed SAS70 Type II Audit, and will continue to obtain the appropriate security certifications and accreditations to demonstrate the comprehensive security of the infrastructure and services.