Re: Secure Web Gateway

["King, Ronald A." <raking () NSU EDU>]

Palo Alto Networks' firewalls have three layers that can be used for http.
SSL decryption capabilities can be added.  I believe all are at an
additional cost:

 

*         Threat protection: Antivirus, anti-spyware and vulnerability
protection

*         URL filtering to include malware and phishing categories.

*         Wildfire: Similar to Fireeye used for uploading exe files into a
virtual environment to evaluate for malicious activity.  PDFs are coming
soon.

 

If the firewall permits it, then the IPS usually takes action.  

 

While we do not have specific statistics, we see that we have better
visibility and thus, better responses to threats.  

 

Now if we can get users to stop using Dropbox to share their malware, we
would be in good shape.

 

Got a Phish (email)? Forward it to  <mailto:abuse () nsu edu> abuse () nsu edu!

 

Ronald King

Security Engineer

Norfolk State University

Marie V. McDemmond Center for Applied Research

Suite 401

555 Park Ave.

Norfolk, Virginia  23504

Phone:  757-823-3918

Fax: 757-823-2128

Email:  <mailto:raking () nsu edu> raking () nsu edu

 <http://security.nsu.edu> http://security.nsu.edu

 

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Bohlk, Christopher J.
Sent: Monday, September 30, 2013 10:18 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Secure Web Gateway

 

Hi All,

 

I was wondering what secure web gateway solutions universities are using to
help mitigate/block web sites that contain malware?

 

What solution do you use and what has been your experience?  Has this
substantially reduced the amount of computers infected with malware
associated with web browsing?  

 

Thanks,

Chris 

 

Chris Bohlk, CISSP, C|EH

Pace University

Information Security Officer

Information Technology Services (ITS)

235 Elm Road, West Hall 212A

Briarcliff Manor, NY 10510

(914)923-2649  Office

Attachment: smime.p7s
Description: