SERVERLOCK
™
. SEALED AND SECURE.
SECURE YOUR SERVERS FROM THE
INSIDE OUT.
A NEW INTERNET
SECURITY CHALLENGE
Recently, hackers have devised new ways to steal or damage the
valuable business information stored on your servers. They have
learned to hide their attacks inside legitimate traffic that needs to
pass through your firewall. And when malicious attacks come from
inside your company, as over 38% of attacks now do, your firewall
offers no protection at all.
HERE IS WHAT CAN HAPPEN:
– UNAUTHORIZED CHANGES TO WEB PAGES, SCRIPTS, AND
CONTENT. Your corporate Web pages can be defaced and Web site
data can be changed, resulting in lost business and lost customer
confidence.
– DESTRUCTION OR ALTERATION OF CUSTOMER INFORMATION
AND RECORDS. Your customer records can be destroyed or
changed, files can be deleted, and server system settings can be
altered, resulting in missing information, or inaccurate information
being used to make decisions.
– DIVERSION OF CUSTOMER AND BUSINESS TRAFFIC. Your confi-
dential electronic business correspondence and transaction traffic
can be diverted to inappropriate locations, or monitored from
unknown locations.
INTRODUCING
WATCHGUARD
®
SERVERLOCK
™
WatchGuard ServerLock—security software for your network servers—
solves the problem. WatchGuard ServerLock stops unauthorized
changes and protects the integrity of your business information.
Simply install WatchGuard ServerLock on your public Web servers
to protect the information you share with your customers. Install
ServerLock on your internal servers to ensure that vital records and
The ServerLock intuitive user interface enables you to switch
from mode to mode at a click of a button.
OPERATIONAL MODE
ADMINISTRATIVE MODE
data are never changed without authorization. Optional WatchGuard
ServerLock Manager software makes it easy for you to manage your
server security system from a convenient central location.
WatchGuard ServerLock products work independently or in conjunc-
tion with WatchGuard Firebox™ products for the highest level of
network security available to protect your business.
HOW IT WORKS
The concept is simple. Even though network server administrative
tasks are performed only intermittently, administrative functions are
usually on and available around-the-clock. This makes it easy for
those with malicious intent to wreak havoc inside your network.
WatchGuard ServerLock solves this problem by restricting access to
all administrative functionality, except when these tasks need to be
performed by an authorized network administrator.
With WatchGuard ServerLock, your servers work in two
modes. Operational Mode lets your servers do the
normal work they are supposed to do, such as providing
Web content and database access. In Operational
Mode, your servers are inaccessible for any reason.
Switch to Administrative Mode, log in to authenticate,
and make any necessary configuration changes. Then
reload, update, or reset system rules. Once you are
finished, simply switch your servers back to Operational
Mode with a click of your mouse. It’s that simple.
WatchGuard ServerLock uses a kernel-based public key
encrypted communications channel to ensure proper
authentication.
SERVERLOCK IN MANAGED MODESERVERLOCK IN SOLO MODE
Icons show red, yellow, or green
to easily and intuitively indicate the
protection status in force at every
level across your enterprise.
THE WATCHGUARD
®
SERVERLOCK
™
SYSTEM
COMPONENTS
Every WatchGuard ServerLock System includes:
– WATCHGUARD SERVERLOCK
Ensures server content protection from internal and external
attacks or errors. Install WatchGuard ServerLock on every server in
your enterprise that you want to protect. ServerLock can operate
in Solo Mode—on a single server—or in Managed Mode, in conjunc-
tion with WatchGuard ServerLock Manager software. ServerLock
Manager lets you manage multiple installations of ServerLock from
one central location.
– WATCHGUARD SERVERLOCK MANAGER
Controls the integrity of servers across your enterprise. With a
simple and elegant user interface, WatchGuard ServerLock Manager
is easy to use, secure, and powerful. A click of your mouse lets you
configure security rules, assign server groups, and set server
protection levels—at whatever level of detail you need.
WatchGuard ServerLock Manager uses a combination of kernel-based
PKI, a 239-bit Elliptical Curve Cryptosystem (ECC) from Certicom, and
triple DES encryption to ensure instructions and communications
from the management console cannot be intercepted.
WATCHGUARD
®
LIVESECURITY
™
SERVICE
Every WatchGuard ServerLock system includes a one-year subscription to our innovative LiveSecurity Service,
keeping your security system up-to-date by delivering the following vital information directly to your desktop:
– SOFTWARE UPDATES
– TECHNICAL SUPPORT
– NEWS AND EXPERT ADVICE
– THREAT ALERTS AND RESPONSES
– ONLINE TRAINING
THE WATCHGUARD
®
SERVERLOCK
™
ADVANTAGE
SECURITY DESCRIPTION THE SERVERLOCK ADVANTAGE
TECHNOLOGY
INTRUSION ID scans for hacking behavior Regardless of the type of intrusion, ServerLock
DETECTION patterns and tampering. is in place on your servers to protect your
operating system and corporate data.
HARDENED OS An operating system that has ServerLock works without altering the integrity
been configured for additional of your OS. The On/Off simplicity of ServerLock
security strength. requires no patches or special training.
TRUSTED OS An OS that is built from the ServerLock does not require a customized OS.
ground up. Trusted OS can It is a device driver designed to work seamlessly
provide detailed audit history. with existing operating systems.
FIREWALL Ensures perimeter protection ServerLock protects at the server level, inside
by monitoring and analyzing the firewall. Combined, ServerLock and your fire-
network traffic. wall provide a strong network security solution.
ACCESS CONTROL Uses a traditional, hierarchical When ServerLock is in Operational Mode, access
approach to access according is denied for any reason, regardless of user
to individual user privileges. privilege. Users must be authenticated before
changes can be made in Administrative Mode.
Web e-mail database
Servers
Internet
Firewall
(optional)
Internal
DMZ
Web e-mail database
Web e-mail database
Servers
Internet
Firewall
(optional)
Manager
Servers
DMZ
Internal
Internal
Manager
Internet
DMZ
Firewall
(optional)
HOW WATCHGUARD
®
SERVERLOCK
™
WORKS IN ANY ENTERPRISE
NECESSARY PROTECTION:
WATCHGUARD SERVERLOCK FOR
YOUR PUBLIC SERVERS (DMZ)
Your public Web servers are the most
vulnerable points in your network. Install
WatchGuard ServerLock on each public
server and conduct e-commerce with
confidence.
SMALL ENTERPRISE PROTECTION:
WATCHGUARD SERVERLOCK INSIDE
AND OUT
Your enterprise may contain Web servers,
e-mail servers, and databases in your
DMZ, as well as internal server systems
that reside behind your network perimeter.
Install WatchGuard ServerLock on your
public servers, and on your internal
network servers, and manage them all
from a single location with WatchGuard
ServerLock Manager. You get complete
visibility and robust security, inside
and out.
LARGE ENTERPRISE PROTECTION:
FOR WEB HOSTERS, ISP
S, ASPS,
AND LARGE ORGANIZATIONS
Your enterprise may have servers scat-
tered across the globe. In fact, you may
even be monitoring servers on behalf of
customers in a hosted environment. Install
WatchGuard ServerLock on every server,
and use WatchGuard ServerLock Manager
to organize and manage your entire net-
work of servers in combinations that suit
your particular needs.
WATCHGUARD
®
SERVERLOCK
™
BENEFITS
With the click of your mouse, you can turn WatchGuard ServerLock
on. It’s that simple. In Operational Mode, the rules are set and
ServerLock enforces them. Log in for authentication in Administrative
Mode and make any necessary modifications and updates. When you
are done, return to Operational Mode to lock down your servers.
– NO SPECIALIZED EXPERTISE REQUIRED
– LOW CPU PERFORMANCE IMPACT
– EASY TO INSTALL AND CONFIGURE
– LOW OPERATING AND MANAGEMENT COSTS
From the WatchGuard ServerLock Manager console, you can manage
the server security for your entire organization from a single location,
even your laptop. WatchGuard ServerLock offers:
– SECURE CENTRALIZED MANAGEMENT OF MULTIPLE SERVERS
– COMPLETE MONITORING OF PROTECTED SERVERS
– AUTOMATIC ALERTS AND REPORTS ON HOSTILE ACTIONS
– CONFIGURABLE PROTECTION OF INDIVIDUAL APPLICATIONS
Part # 0401WGCO65630
U.S. SALES:
1.800.734.9905
INTERNATIONAL SALES:
206.521.8340
FAX:
206.521.8342
E-MAIL:
information@watchguard.com
© 2001 WatchGuard Technologies, Inc.
All rights reserved. WatchGuard and Livesecurity are either trademarks or registered trademarks of WatchGuard Technologies, Inc. in the United
States and other countries. Firebox, ServerLock and Designing peace of mind are trademarks of WatchGuard Technologies, Inc. All other
trademarks and tradenames are the property of their respective owners.
ADDRESS:
505 Fifth Avenue South, Suite 500
Seattle, WA 98104-3892
WEB:
www.watchguard.com
ABOUT WATCHGUARD
®
WatchGuard (Nasdaq: WGRD) is a leading provider of dynamic,
comprehensive Internet security solutions designed to protect
enterprises that use the Internet for e-business and secure
communications. The Company is a pioneer in the creation of the plug-
and-play Internet security appliance and server security software. The
Company’s innovative LiveSecurity Service enables organizations and
users to keep their security systems up-to-date, and its ServerLock
software provides server content and application security to protect
critical data and services against unauthorized or unintentional access
or manipulation.
FOR MORE INFORMATION
Please visit us on the Web at www.watchguard.com to request a free
informational CD-ROM that includes our product demo, or contact your
reseller for more information.
/
