Watchguard WG4807 Datasheet

Brand: Watchguard

Model: WG4807

Type: Datasheet

SERVERLOCK

™

. SEALED AND SECURE.

SECURE YOUR SERVERS FROM THE

INSIDE OUT.

A NEW INTERNET

SECURITY CHALLENGE

Recently, hackers have devised new ways to steal or damage the

valuable business information stored on your servers. They have

learned to hide their attacks inside legitimate traffic that needs to

pass through your firewall. And when malicious attacks come from

inside your company, as over 38% of attacks now do, your firewall

offers no protection at all.

HERE IS WHAT CAN HAPPEN:

– UNAUTHORIZED CHANGES TO WEB PAGES, SCRIPTS, AND

CONTENT. Your corporate Web pages can be defaced and Web site

data can be changed, resulting in lost business and lost customer

confidence.

– DESTRUCTION OR ALTERATION OF CUSTOMER INFORMATION

AND RECORDS. Your customer records can be destroyed or

changed, files can be deleted, and server system settings can be

altered, resulting in missing information, or inaccurate information

being used to make decisions.

– DIVERSION OF CUSTOMER AND BUSINESS TRAFFIC. Your confi-

dential electronic business correspondence and transaction traffic

can be diverted to inappropriate locations, or monitored from

unknown locations.

INTRODUCING

WATCHGUARD

SERVERLOCK

™

WatchGuard ServerLock—security software for your network servers—

solves the problem. WatchGuard ServerLock stops unauthorized

changes and protects the integrity of your business information.

Simply install WatchGuard ServerLock on your public Web servers

to protect the information you share with your customers. Install

ServerLock on your internal servers to ensure that vital records and

The ServerLock intuitive user interface enables you to switch

from mode to mode at a click of a button.

OPERATIONAL MODE

ADMINISTRATIVE MODE

data are never changed without authorization. Optional WatchGuard

ServerLock Manager software makes it easy for you to manage your

server security system from a convenient central location.

WatchGuard ServerLock products work independently or in conjunc-

tion with WatchGuard Firebox™ products for the highest level of

network security available to protect your business.

HOW IT WORKS

The concept is simple. Even though network server administrative

tasks are performed only intermittently, administrative functions are

usually on and available around-the-clock. This makes it easy for

those with malicious intent to wreak havoc inside your network.

WatchGuard ServerLock solves this problem by restricting access to

all administrative functionality, except when these tasks need to be

performed by an authorized network administrator.

With WatchGuard ServerLock, your servers work in two

modes. Operational Mode lets your servers do the

normal work they are supposed to do, such as providing

Web content and database access. In Operational

Mode, your servers are inaccessible for any reason.

Switch to Administrative Mode, log in to authenticate,

and make any necessary configuration changes. Then

reload, update, or reset system rules. Once you are

finished, simply switch your servers back to Operational

Mode with a click of your mouse. It’s that simple.

WatchGuard ServerLock uses a kernel-based public key

encrypted communications channel to ensure proper

authentication.

SERVERLOCK IN MANAGED MODESERVERLOCK IN SOLO MODE

Icons show red, yellow, or green

to easily and intuitively indicate the

protection status in force at every

level across your enterprise.

THE WATCHGUARD

SERVERLOCK

™

SYSTEM

COMPONENTS

Every WatchGuard ServerLock System includes:

– WATCHGUARD SERVERLOCK

Ensures server content protection from internal and external

attacks or errors. Install WatchGuard ServerLock on every server in

your enterprise that you want to protect. ServerLock can operate

in Solo Mode—on a single server—or in Managed Mode, in conjunc-

tion with WatchGuard ServerLock Manager software. ServerLock

Manager lets you manage multiple installations of ServerLock from

one central location.

– WATCHGUARD SERVERLOCK MANAGER

Controls the integrity of servers across your enterprise. With a

simple and elegant user interface, WatchGuard ServerLock Manager

is easy to use, secure, and powerful. A click of your mouse lets you

configure security rules, assign server groups, and set server

protection levels—at whatever level of detail you need.

WatchGuard ServerLock Manager uses a combination of kernel-based

PKI, a 239-bit Elliptical Curve Cryptosystem (ECC) from Certicom, and

triple DES encryption to ensure instructions and communications

from the management console cannot be intercepted.

WATCHGUARD

LIVESECURITY

™

SERVICE

Every WatchGuard ServerLock system includes a one-year subscription to our innovative LiveSecurity Service,

keeping your security system up-to-date by delivering the following vital information directly to your desktop:

– SOFTWARE UPDATES

– TECHNICAL SUPPORT

– NEWS AND EXPERT ADVICE

– THREAT ALERTS AND RESPONSES

– ONLINE TRAINING

THE WATCHGUARD

SERVERLOCK

™

ADVANTAGE

SECURITY DESCRIPTION THE SERVERLOCK ADVANTAGE

TECHNOLOGY

INTRUSION ID scans for hacking behavior Regardless of the type of intrusion, ServerLock

DETECTION patterns and tampering. is in place on your servers to protect your

operating system and corporate data.

HARDENED OS An operating system that has ServerLock works without altering the integrity

been configured for additional of your OS. The On/Off simplicity of ServerLock

security strength. requires no patches or special training.

TRUSTED OS An OS that is built from the ServerLock does not require a customized OS.

ground up. Trusted OS can It is a device driver designed to work seamlessly

provide detailed audit history. with existing operating systems.

FIREWALL Ensures perimeter protection ServerLock protects at the server level, inside

by monitoring and analyzing the firewall. Combined, ServerLock and your fire-

network traffic. wall provide a strong network security solution.

ACCESS CONTROL Uses a traditional, hierarchical When ServerLock is in Operational Mode, access

approach to access according is denied for any reason, regardless of user

to individual user privileges. privilege. Users must be authenticated before

changes can be made in Administrative Mode.

Web e-mail database

Servers

Internet

Firewall

(optional)

Internal

DMZ

Web e-mail database

Servers

Internet

Firewall

(optional)

Manager

Servers

DMZ

Internal

Manager

Internet

DMZ

Firewall

(optional)

HOW WATCHGUARD

SERVERLOCK

™

WORKS IN ANY ENTERPRISE

NECESSARY PROTECTION:

WATCHGUARD SERVERLOCK FOR

YOUR PUBLIC SERVERS (DMZ)

Your public Web servers are the most

vulnerable points in your network. Install

WatchGuard ServerLock on each public

server and conduct e-commerce with

confidence.

SMALL ENTERPRISE PROTECTION:

WATCHGUARD SERVERLOCK INSIDE

AND OUT

Your enterprise may contain Web servers,

e-mail servers, and databases in your

DMZ, as well as internal server systems

that reside behind your network perimeter.

Install WatchGuard ServerLock on your

public servers, and on your internal

network servers, and manage them all

from a single location with WatchGuard

ServerLock Manager. You get complete

visibility and robust security, inside

and out.

LARGE ENTERPRISE PROTECTION:

FOR WEB HOSTERS, ISP

S, ASPS,

AND LARGE ORGANIZATIONS

Your enterprise may have servers scat-

tered across the globe. In fact, you may

even be monitoring servers on behalf of

customers in a hosted environment. Install

WatchGuard ServerLock on every server,

and use WatchGuard ServerLock Manager

to organize and manage your entire net-

work of servers in combinations that suit

your particular needs.

WATCHGUARD

SERVERLOCK

™

BENEFITS

With the click of your mouse, you can turn WatchGuard ServerLock

on. It’s that simple. In Operational Mode, the rules are set and

ServerLock enforces them. Log in for authentication in Administrative

Mode and make any necessary modifications and updates. When you

are done, return to Operational Mode to lock down your servers.

– NO SPECIALIZED EXPERTISE REQUIRED

– LOW CPU PERFORMANCE IMPACT

– EASY TO INSTALL AND CONFIGURE

– LOW OPERATING AND MANAGEMENT COSTS

From the WatchGuard ServerLock Manager console, you can manage

the server security for your entire organization from a single location,

even your laptop. WatchGuard ServerLock offers:

– SECURE CENTRALIZED MANAGEMENT OF MULTIPLE SERVERS

– COMPLETE MONITORING OF PROTECTED SERVERS

– AUTOMATIC ALERTS AND REPORTS ON HOSTILE ACTIONS

– CONFIGURABLE PROTECTION OF INDIVIDUAL APPLICATIONS

Part # 0401WGCO65630

U.S. SALES:

1.800.734.9905

INTERNATIONAL SALES:

206.521.8340

FAX:

206.521.8342

E-MAIL:

information@watchguard.com

States and other countries. Firebox, ServerLock and Designing peace of mind are trademarks of WatchGuard Technologies, Inc. All other

trademarks and tradenames are the property of their respective owners.

ADDRESS:

505 Fifth Avenue South, Suite 500

Seattle, WA 98104-3892

WEB:

www.watchguard.com

ABOUT WATCHGUARD

WatchGuard (Nasdaq: WGRD) is a leading provider of dynamic,

comprehensive Internet security solutions designed to protect

enterprises that use the Internet for e-business and secure

communications. The Company is a pioneer in the creation of the plug-

and-play Internet security appliance and server security software. The

Company’s innovative LiveSecurity Service enables organizations and

users to keep their security systems up-to-date, and its ServerLock

software provides server content and application security to protect

critical data and services against unauthorized or unintentional access

or manipulation.

FOR MORE INFORMATION

Please visit us on the Web at www.watchguard.com to request a free

informational CD-ROM that includes our product demo, or contact your

reseller for more information.

Watchguard WG4807 Datasheet

Watchguard WG4807 Datasheet

Watchguard WG4807 Datasheet

Related papers