Users & Access Security – DCS Website

Asset Discovery

S1 Singularity Ranger
Singularity Ranger is a real-time network attack surface control solution that finds and fingerprints all IP-enabled devices on your network, for global visibility with zero additional agents, hardware, or network changes. Ranger discovers and recovers unsecured endpoints with configurable, automated peer-to-peer agent deployment, to quickly plug gaps in your attack surface. By transforming Sentinel agents into distributed network sensors, Ranger identifies suspicious or malicious devices that can be isolated with a single click. Policies govern what should and should not be scanned. Create global asset inventories in seconds, investigate suspicious activity, and know with certainty what is connected where and with what protocol.

Contact Sales

Asset Discovery

Email Security

		Harmony Email and Collaboration Harmony Email & Collaboration provides complete protection for Microsoft 365, Google Workspace and all your collaboration and file-sharing apps. Email & Collaboration is designed specifically for cloud email environments and is the ONLY solution that prevents, not just detects or responds to, threats from entering the inbox.

		Cisco Secure Email Cisco Secure Email includes advanced threat protection capabilities to detect, block, and remediate threats faster, prevent data loss, and secure important information in transit with end-to-end encryption. With Cisco Secure Email customers can: Detect and block more threats with superior threat intelligence from Talos™, our threat research team. Combat ransomware hidden in attachments that evade initial detection with Cisco Secure Email Malware Defense and Cisco Threat Grid. Drop emails with risky links automatically or block access to newly infected sites with real-time URL analysis to protect against phishing and BEC. Prevent brand abuse and sophisticated identity-based email attacks with Cisco Secure Email Domain Protection and Cisco Secure Email Phishing Defense services. Protect sensitive content in outgoing emails with Data Loss Prevention (DLP) and easy-to-use email encryption, all in one solution. Provide user behavior training with Cisco Secure Awareness Training to help users work smarter and safer. Maximize deployment flexibility with a cloud, virtual, on-premises, or hybrid deployment or move to the cloud in phases. Integrate across a growing number of Cisco Security products and accelerate key security operations functions like visibility, detection, automation, investigation, and remediation with SecureX.

		Cloud App Security Trend Micro Cloud App Security enables you to embrace the efficiency of cloud services while maintaining security. It protects incoming and internal emails from Microsoft 365 and Gmail against advanced malware and other threats. It also enforces compliance on other cloud file- sharing and collaboration services, including Box, Dropbox, Google Drive, Microsoft SharePoint online, Microsoft OneDrive for business, and Microsoft Teams. Cloud App Security integrates directly with Microsoft 365, Google Workspace, and other services using APIs, maintaining all user functionality without changing the MX record to reroute email traffic or setting up a web proxy. This second layer of defense caught 39.9 million high-risk threats beyond those detected by the cloud email services’ built-in security.
		Email Security Email is mission critical, but email-based threats, including ransomware and business email compromise (BEC), are growing exponentially—and it’s difficult to keep up. Even your savviest employees can mistakenly click on a malicious link and expose your enterprise to a cyberattack.Trend Micro Email Security stops more phishing, ransomware, and BEC attacks. Our solution uses an optimum blend of cross- generational threat techniques, like machine learning, sandbox analysis, data loss prevention (DLP), and other methods to stop all types of email threats. This solution minimizes management overhead and integrates with other Trend Micro security layers to share threat intelligence and provide central visibility of threats across your organization. Email Security protects Microsoft Exchange, Microsoft 365, Gmail, and other hosted and on-premises email solutions.

Endpoint Security

		Falcon CrowdStrike Falcon® Endpoint Protection Enterprise sets the new standard in endpoint security with the first and only cloud-native security platform proven to stop breaches by unifying next-gen antivirus (NGAV), endpoint detection and response (EDR), managed threat hunting and integrated threat intelligence, in a single cloud-delivered agent.

		Cortex XDR Prevent, Detect, and Respond to the Stealthiest ThreatsYou can now stop modern attacks with Cortex XDR – the industry’s first endpoint-based extended detection and response platform that integrates data from any source. Your SOC team can cut through the noise and focus on what matters most with intelligent alert grouping and incident scoring. Cross-data insights accelerate investigations so that you can streamline incident response and recovery. Finally, by harnessing the power of AI, analytics, and rich data, XDR allows you to detect stealthy threats.Cortex XDR delivers peace of mind with industry-leading endpoint security that achieved the highest combined protection and detection scores in the 2022 MITRE ATT&CK Evaluations. The Cortex XDR platform collects and analyzes all data, so you can gain complete visibility and holistic protection to secure what’s next. Block Attacks with Best-in-Class Endpoint Detection and Response The Cortex XDR agent offers unparalleled protection for exploits, malware, ransomware, and fileless attacks. It includes the broadest set of exploit protection modules available to block malware infections. It enables sharp detection with AI-powered analytics and threat insights. Finally, it allows you to remediate quickly and take control of affected machines.

		S1 Singularity Endpoint Singularity Complete provides best-in-breed EPP & EDR capabilities in one platform, management console, and agent. Designed for organizations seeking enterprise-grade prevention, detection, and response scalable across the enterprise, coupled with custom automations, Singularity Complete empowers security teams to easily identify and secure every user endpoint on their network. Patented Storyline™ for fast RCA and easy pivots Complete visibility of both benign and malicious data Data retention options to suit every need, upgradeable up to 3 years Hunt by MITRE ATT&CK® Technique Mark benign Storylines as threats for enforcement by the EPP functions Custom detections and automated hunting rules with Storyline Active Response (STAR™) Built-in data collection scripts to enhance visibility and incident investigation Timelines, remote shell, file fetch, sandbox integrations, and more

		Apex One Eliminate security gaps across any user activity and endpoint with a blend of advanced threat protection techniques combined with detection and response, delivered through a single-agent portfolio. Automated: Stop attackers sooner with the most effective protection against zero-day threats: a blend of next-gen anti-malware techniques and the industry’s most timely virtual patching. Insightful: Get exceptional visibility and control across your environment. Integrated extended detection and response (XDR) capabilities for cross-layer detection, investigation, and threat hunting. Connected: Quickly respond to attacks with real-time and local threat intelligence updates and a broad API set for integration with third-party security tools. Flexible deployment options fit perfectly with your environment. You can have it all. Malware and ransomware protection: Defends endpoints against threats like malware, ransomware, and malicious scripts. Advanced protection capabilities adapt to protect against unknown and stealthy new threats. Extensive detection and response capabilities in one console: XDR goes beyond EDR with cross-layer detection and threat hunting and investigation across email, endpoints, servers, cloud workloads, and networks. The industry’s most timely virtual patching: Vulnerability protection applies virtual patches for protection before a patch is available or deployable. Ransomware rollback: Detects ransomware with runtime machine learning and expert rules to block encryption processes in milliseconds. Rollback restores any files encrypted before the detection. Connected threat defense: Trend Micro Apex One integrates with other security products via our global cloud threat intelligence, delivering sandbox rapid response updates to endpoints. Flexible deployment: Trend Micro Apex One as a Service saves time, money, and is always up to date with the latest protection. On-premises and hybrid deployments are also fully supported.

NAC (Network Access Control)

		Cisco Identity Services Engine (ISE) A security policy management platform that provides secure network access to end users and devices. Cisco ISE enables the creation and enforcement of security and access policies for endpoint devices that are connected to an organization’s routers, switches and wireless. It is designed to help organizations simplify identity management across devices and applications.Cisco Identity Services Engine helps enterprises understand and gain visibility into their network, giving them the ability to see who is connected as well as which applications are installed and running. The product can help with zero-trust strategies by securing the network and everyone and every endpoint connected to it. ISE can also share data like user and device identities as well as threats and vulnerabilities with other integrated Cisco tools to further streamline security policy management.Cisco Identity Services Engine (ISE) provides a range of network access control (NAC) capabilities from guest access to security response depending upon the licenses and appliances purchased. ISE is intended for use with guest and employee endpoints, but Cisco also offers separate and specialized NAC solutions for equipment (internet of things (IoT), operational technology (OT), and industrial controls), for medical devices, and specifically for rapid threat containment.With an increased number of users and devices accessing networks remotely, protecting an organization’s data from network security breaches becomes more complex. Administrators can use Cisco Identity Services Engine to control who has access to their network and ensure authorized policy-compliant devices are being used. IT administrators can use ISE for policy enforcement, visibility, granting guest access to the network, threat containment, tool integrations, device administration and bring-your-own-device (BYOD) management. Cisco ISE can authenticate wired, wireless and virtual private network (VPN) users. Authorized and unauthorized users are logged so administrators can view who and which devices are connected to their network at any time.

		Forescout eyeExtend Automate Security Workflows Across Disparate Products : Share device context between the Forescout Platform and other IT and security products, automate policy enforcement across disparate tools and accelerate system-wide response to mitigate risks.
		Forescout eyeControl Flexible and frictionless network access control for heterogeneous enterprise networks. It enforces and automates Zero Trust security policies for least-privilege access on all managed and unmanaged assets across your digital terrain. Policy-based controls can continuously enforce asset compliance, proactively reduce your attack surface, and rapidly respond to incidents. Secure Network Access Enforce network access based on user, device identity and security posture Deploy with or without 802.1X in heterogeneous networks Enforce Asset Compliance Automate compliance with security policies, industry standards and government regulations Initiate remediation and risk mitigation workflows in real-time Automate Incident Response Automate response to security incidents Contain threats to minimize propagation and disruption
		Forescout eyeSegment Forescout eyeSegment removes the complexity of designing, planning and deploying dynamic segmentation across your digital terrain. Shrink the attack surface, limit the blast radius and mitigate regulatory and business risk by rapidly accelerating your segmentation projects. A core component of Forescout Continuum Platform, eyeSegment enables organizations to embrace zero trust security principles and automate cybersecurity actions across their digital terrain.
		Forscout eyeInspect In-depth device visibility for OT/ICS networks and enables effective, real-time management of operational and cyber risks. Fully understanding the cyber-resiliency of your OT network with an Asset Risk Framework Gain complete device visibility through deep packet inspection of more than 270 industrial network protocols and baseline assets Defend your network with thousands of OT-specific threat indicators and powerful anomaly detection
		Forescout eyeSight Forescout eyeSight delivers unparalleled insight into every connected asset through deep integration into your network fabric. Discover your entire asset inventory with over 30 active and passive techniques that reveal coverage gaps across your digital terrain, providing a real-time view of your attack surface Automate asset classification and build comprehensive profiles that include known risks and vulnerabilities with threat intelligence powered by Vedere Labs Prepare to face new threats as they emerge by leveraging cloud-based machine learning that continuously improves Forescout’s Device Cloud, a proprietary source of device intelligence with over 30 billion unique data points Continuously assess an asset’s status, risk posture, and policy compliance without needing an agent to be installed, which is essential for protecting IoT, IoMT, and OT assets Multiply your forces while minimizing human error with automated reporting on compliance posture and cyber-risk exposure, letting you focus your efforts on what matters most.

		Aruba Clearpass Aruba ClearPass for Secure Network Access Control. From IoT to an always-on mobile workforce, organizations are more exposed to attacks than ever before. With Aruba ClearPass, you get agentless visibility and dynamic role-based access control for seamless security enforcement and response across your wired and wireless networks. Agentless policy control and automated response. What’s needed beyond visibility, control and response? Real-time policies for how users and devices connect and what they can access is critical, as well as robust guest access and strong enforcement capabilities.Enforcing access privileges to effectively reduce risk. In addition to its role as the policy enforcement mechanism for ClearPass, the Aruba Policy Enforcement Firewall (PEF) has been designated “Cyber Catalystsm”, based on its ability to effectively reduce risk. Secure access for guest, BYOD and corporate devices There are simple ways to let users securely connect devices to a network – without compromising security. ClearPass includes secure Wi-Fi guest access, device onboarding and health checks, and strong enforcement capabilities. Leverage the ClearPass Security Ecosystem. Integrating disparate tools and technologies is critical in today’s security environment. Our Security Exchange Program brings together best-of-breed third-party solutions for end-to-end security – from the campus to the road warrior. Key features Role-based, unified network access enforcement across multi-vendor wireless, wired and VPN networks. Intuitive policy configuration templates and visibility troubleshooting tools. Supports multiple authentication/authorization sources (AD, LDAP, SQL). Self-service device onboarding with built-in certificate authority (CA) for BYOD. Guest access with extensive customization, branding, and sponsor-based approvals. Integration with key UEM solutions for in-depth device assessments Comprehensive integration with the HPE Aruba Networking 360 Security Exchange Program. Single sign-on (SSO) support works with other identity management tools to improve user experience to SAML 2.0-based applications. FIPS 140-2 and CC certified.

Web Security

		Forcepoint ONE Secure Web Gateway (SWG) The Forcepoint ONE Secure Web Gateway (SWG) is one of the three foundational gateways of the Forcepoint ONE all-in-one cloud platform. Forcepoint ONE SWG monitors and controls any interaction with any website, including blocking access to websites based on category and risk score, blocking download of malware, blocking upload of sensitive data to personal file sharing accounts, detecting shadow IT, and optionally providing Remote Browser Isolation (RBI) with Content Disarm and Reconstruction (CDR)

		Sangfor Internet Access Gateway Sangfor IAG enables you to identify, analyze and take immediate action upon user internet access behavior. Gain full visibility to find any bad behavior in encrypted traffic. Uncover user identity with analytics into who is using what applications and when it is used on your network. Take full control to increase user productivity by ensuring internet access compliance. Product Advantages Proxy Avoidance Protection: Web filters are commonly used by the organization to restrict user internet access to certain web application content, and it has increasingly become non-effective against proxy avoidance applications. IAG collaborates with Endpoint Secure to enforce Proxy Avoidance Protection on any user attempt to use this application for bypassing the security perimeter more effectively. The R&D team within Sangfor employs a dedicated team of application signatures security experts who are continuously categorizing and adding the latest proxy avoidance applications to ensure that detection rate and blocking capabilities are current and up to date. Intelligent Traffic Management Sangfor IAG improves bandwidth utilization by more than 30% using three unique major traffic management solutions. Dynamic Traffic Control automatically adjusts traffic control policies and intelligently allocates idle bandwidth resources. Intelligent Flow Control manages both up-link and down-link P2P traffic and can customize traffic “packages” for different users, allocating specific traffic quotas and limiting bandwidth for heavier users. Gateway and Client Decryption to Uncover Encrypted Traffic Typically, most of the internet traffic is protected by SSL/TLS encryption. While encryption helps to keep user and corporate data protected and private, it also creates security challenges when it comes to the rapid growth of malware infections and other malicious content. Sangfor IAG offers both decryption methods including gateway and client decryption to overcome these challenges. This enables an organization to have the flexibility to run either one or both in parallel to uncover encrypted traffic according to your corporate IT strategy and planning. Unified Network-wide Management of all Clients Sangfor IAG provides Unified Management and effectively controls both Wired and Wireless networks for the entire network. With intuitive and flexible authentication methods, it fully guarantees the security of access control, supporting a variety of traditional authentication methods such as username/password, IP/MAC binding, and a wide array of value-added marketing authentication methods (QR code, SMS, WeChat, social media, OA account, SAML 2.0, third-party system, etc.). Permissions are controlled based on user, application, location, and client types while using IAG or third-party wireless controller as a unified authentication server, building a faster and more cost-effective wireless network. Precise and Accurate Application Control Sangfor IAG manages and controls network applications more comprehensively, accurately, and conveniently with the largest application signature database in Asia, which can identify more than 6,000+ applications in its database including 700+ cloud applications, 1,000+ mobile applications, 300+ web applications, and is updated every 2 weeks. In addition, it precisely controls applications according to their specific functions, such as distinguishing upload, download, and other actions in the network. Finally, bulk management mode for large enterprises greatly improves management efficiency. Offloading Performance When Using ICAP Integration with Third-Party System Sangfor IAG can act as an ICAP client to be used with any ICAP server-enabled network appliance by offloading threat protection or other value-added services. In addition, Sangfor IAG provides request and response inspection mode while enabling the ICAP server group to run on a round-robin or concurrent condition. Secure Onboarding Devices with Endpoint Compliance Check Sangfor IAG identifies and secures endpoint devices with or without agents, it helps to ensure these devices are connected with compliance and security. You gain visibility and control of what is in your environment without impacting your network performance.

		Web Security The rising sophistication and complexity of web threats, coupled with the new ways your employees do their work, have eroded the effectiveness of traditional web security solutions. In addition to blocking malicious code, inappropriate websites, and targeted attacks, security managers also need to protect an increasingly mobile workforce who frequently adopt new cloud-based applications.Trend Micro Web Security protects against cyber threats before they reach your users. It uses cross-generational defense techniques to catch known and unknown threats, giving you visibility and access control on unsanctioned cloud applications for each of your users. Our unique deployment model provides you with the flexibility to deploy gateways on-premises, in the cloud, or both—protecting your users no matter where they are. One cloud-based management console simplifies your workload, letting you set up policy, manage users, and access reporting across a single pane of glass.

		Zscaler Internet Access (ZIA) Zscaler Internet Access includes a comprehensive suite of AI-powered security and data protection services to help you stop cyberattacks and data loss. As a fully cloud-delivered SaaS solution, you can add new capabilities without any additional hardware or lengthy deployment cycles. The modules available as part of Zscaler Internet Access are: Cloud Secure Web Gateway (SWG): Deliver a safe, fast web experience that eliminates ransomware, malware, and other advanced attacks with real-time, AI-powered analysis and URL filtering from the only leader in the 2020 Gartner MQ for SWGs. Cloud Access Security Broker (CASB): Secure cloud apps with integrated CASB to protect data, stop threats, and ensure compliance across your SaaS and IaaS environments. Cloud Data Loss Prevention (DLP): Protect data in motion with full inline inspection and advanced measures like exact data match (EDM), optical character recognition (OCR), and machine learning. Zscaler Firewall & cloud IPS: Extend industry- leading protection to all ports and protocols and replace edge and branch firewalls with a cloud native platform. Zscaler Sandbox: Stop never-before-seen and elusive malware across web and file transfer protocols with AI-driven quarantine, sharing consistent and global protection across all users in real time. AI-Powered Cloud Browser Isolation: Make web-based attacks obsolete and prevent data loss by creating a virtual air gap between users, the web, and SaaS. Digital Experience Monitoring: Reduce IT operational overhead and speed up ticket resolution with a unified view of application, cloud path, and endpoint performance metrics for analysis and troubleshooting. Zero Trust Branch Connectivity: Reduce risk and complexity with non-routable branch and data center connectivity for users, servers, and IOT/OT devices. DNS Security: Optimize DNS security and performance for all users, devices, and applications, on all ports and protocols, anywhere in the world.

ZTNA

		Forcepoint ONE Zero Trust Network Access (ZTNA) Forcepoint ONE Zero Trust Network Access (ZTNA) is one of the three foundational gateways of the Forcepoint ONE cloud platform. It controls access to individual applications hosted behind a firewall, without the need for virtual private networks (VPNs), while providing data loss prevention (DLP) and malware protection for private web-based applications.

		Vision One – Zero Trust Secure Access As the recent transition to a remote or hybrid workforce has widened the digital attack surface, increasing cyber risk significantly across many organizations, the adage of “trust, but verify” is no longer practical. The growing interest and movement toward zero trust architectures in the past few years has shifted this approach to the more accurate “never trust, always verify.”And for good reason. The broad implicit-trust methods and practices haven’t kept pace with stealthy, more resourceful threat actors. Organizations need to modernize the methods used to securely connect users, devices, and applications no matter where they are or what they need to access. Introducing Trend Vision One™ — Zero Trust Secure Access: Secure Access is part of Trend Vision One™. The modern cloud-native platform integrates attack surface risk management (ASRM), extended detection and response (XDR), and Secure Access.Through Trend Vision One, organizations can enrich continuous adaptive risk and trust assessment to drive zero-trust architectures that support their business objectives. With Secure Access, no user or device should be inherently trusted.In relation to SSE, Secure Access provides secure web gateway (SWG), cloud access security broker (CASB) and zero trust network access to secure access of users and devices across network, web, cloud, and private apps—all in one platform. This strengthens your overall security posture by enforcing strong access control permissions from multiple identity services across the organization.

		Zscaler Private Access (ZPA) ZPA is the world’s most deployed ZTNA platform, applying the principle of least privilege to give users secure, direct connectivity to private applications running on-premises or in the public cloud while eliminating unauthorized access and lateral movement. As a cloud native service built on a holistic security service edge (SSE) framework, ZPA can be deployed in a matter of hours to replace legacy VPNs and remote access tools to: Deliver a superior user experience: Connecting users directly to private apps eliminates slow, costly backhauling over legacy VPNs while continuously monitoring and proactively resolving user experience issues Minimize the attack surface: Applications are made invisible to the internet preventing unauthorized users and devices from discovering them. The inside-out connections between user and app ensures apps and IPs are never exposed Enforce least-privileged access: Application access is determined by identity and context— not an IP address—and users are never put on the network for access Eliminate lateral movement: Applications are segmented so that users can only access a specific app, helping limit lateral movement Stop cyberattacks with complete inspection: Private app traffic is inspected inline to prevent the most prevalent web attack techniques Prevent data loss: Integrated DLP for private apps, advanced incident response and data classification to protect crown jewel apps Detect compromised users and devices: Integrated decoys work to quickly identify and remove malicious users and devices