• Detect and block more threats with superior threat intelligence from Talos™, our threat research team.
• Combat ransomware hidden in attachments that evade initial detection with Cisco Secure Email Malware Defense and Cisco Threat Grid.
• Drop emails with risky links automatically or block access to newly infected sites with real-time URL analysis to protect against phishing and BEC.
• Prevent brand abuse and sophisticated identity-based email attacks with Cisco Secure Email Domain Protection and Cisco Secure Email Phishing Defense services.
• Protect sensitive content in outgoing emails with Data Loss Prevention (DLP) and easy-to-use email encryption, all in one solution.
• Provide user behavior training with Cisco Secure Awareness Training to help users work smarter and safer.
• Maximize deployment flexibility with a cloud, virtual, on-premises, or hybrid deployment or move to the cloud in phases.
• Integrate across a growing number of Cisco Security products and accelerate key security operations functions like visibility, detection, automation, investigation, and remediation with SecureX.

Block Attacks with Best-in-Class Endpoint Detection and Response
The Cortex XDR agent offers unparalleled protection for exploits, malware, ransomware, and fileless attacks. It includes the broadest set of exploit protection modules available to block malware infections. It enables sharp detection with AI-powered analytics and threat insights. Finally, it allows you to remediate quickly and take control of affected machines.

• Patented Storyline™ for fast RCA and easy pivots
• Complete visibility of both benign and malicious data
• Data retention options to suit every need, upgradeable up to 3 years
• Hunt by MITRE ATT&CK® Technique
• Mark benign Storylines as threats for enforcement by the EPP functions
• Custom detections and automated hunting rules with Storyline Active Response (STAR™)
• Built-in data collection scripts to enhance visibility and incident investigation
• Timelines, remote shell, file fetch, sandbox integrations, and more

• Automated: Stop attackers sooner with the most effective protection against zero-day threats: a blend of next-gen anti-malware techniques and the industry’s most timely virtual patching.
• Insightful: Get exceptional visibility and control across your environment. Integrated extended detection and response (XDR) capabilities for cross-layer detection, investigation, and threat hunting.
• Connected: Quickly respond to attacks with real-time and local threat intelligence updates and a broad API set for integration with third-party security tools. Flexible deployment options fit perfectly with your environment. You can have it all.
• Malware and ransomware protection: Defends endpoints against threats like malware, ransomware, and malicious scripts. Advanced protection capabilities adapt to protect against unknown and stealthy new threats.
• Extensive detection and response capabilities in one console: XDR goes beyond EDR with cross-layer detection and threat hunting and investigation across email, endpoints, servers, cloud workloads, and networks.
• The industry’s most timely virtual patching: Vulnerability protection applies virtual patches for protection before a patch is available or deployable.
• Ransomware rollback: Detects ransomware with runtime machine learning and expert rules to block encryption processes in milliseconds. Rollback restores any files encrypted before the detection.
• Connected threat defense: Trend Micro Apex One integrates with other security products via our global cloud threat intelligence, delivering sandbox rapid response updates to endpoints.
• Flexible deployment: Trend Micro Apex One as a Service saves time, money, and is always up to date with the latest protection. On-premises and hybrid deployments are also fully supported.

• Enforce network access based on user, device identity and security posture
• Deploy with or without 802.1X in heterogeneous networks
  Enforce Asset Compliance
• Automate compliance with security policies, industry standards and government regulations
• Initiate remediation and risk mitigation workflows in real-time
• Automate Incident Response
• Automate response to security incidents
• Contain threats to minimize propagation and disruption

• Fully understanding the cyber-resiliency of your OT network with an Asset Risk Framework
• Gain complete device visibility through deep packet inspection of more than 270 industrial network protocols and baseline assets

Defend your network with thousands of OT-specific threat indicators and powerful anomaly detection

• Discover your entire asset inventory with over 30 active and passive techniques that reveal coverage gaps across your digital terrain, providing a real-time view of your attack surface
• Automate asset classification and build comprehensive profiles that include known risks and vulnerabilities with threat intelligence powered by Vedere Labs
• Prepare to face new threats as they emerge by leveraging cloud-based machine learning that continuously improves Forescout’s Device Cloud, a proprietary source of device intelligence with over 30 billion unique data points
• Continuously assess an asset’s status, risk posture, and policy compliance without needing an agent to be installed, which is essential for protecting IoT, IoMT, and OT assets

Multiply your forces while minimizing human error with automated reporting on compliance posture and cyber-risk exposure, letting you focus your efforts on what matters most.

Agentless policy control and automated response.
What’s needed beyond visibility, control and response? Real-time policies for how users and devices connect and what they can access is critical, as well as robust guest access and strong enforcement capabilities.Enforcing access privileges to effectively reduce risk. In addition to its role as the policy enforcement mechanism for ClearPass, the Aruba Policy Enforcement Firewall (PEF) has been designated “Cyber Catalystsm”, based on its ability to effectively reduce risk.

Secure access for guest, BYOD and corporate devices
There are simple ways to let users securely connect devices to a network – without compromising security. ClearPass includes secure Wi-Fi guest access, device onboarding and health checks, and strong enforcement capabilities.

Leverage the ClearPass Security Ecosystem.
Integrating disparate tools and technologies is critical in today’s security environment. Our Security Exchange Program brings together best-of-breed third-party solutions for end-to-end security – from the campus to the road warrior.

Key features

• • Role-based, unified network access enforcement across multi-vendor wireless, wired and VPN networks.
  • Intuitive policy configuration templates and visibility troubleshooting tools.
  • Supports multiple authentication/authorization sources (AD, LDAP, SQL).
  • Self-service device onboarding with built-in certificate authority (CA) for BYOD.
  • Guest access with extensive customization, branding, and sponsor-based approvals.
  • Integration with key UEM solutions for in-depth device assessments
  • Comprehensive integration with the HPE Aruba Networking 360 Security Exchange Program.
  • Single sign-on (SSO) support works with other identity management tools to improve user experience to SAML 2.0-based applications.
  • FIPS 140-2 and CC certified.

Product Advantages

Proxy Avoidance Protection:
Web filters are commonly used by the organization to restrict user internet access to certain web application content, and it has increasingly become non-effective against proxy avoidance applications. IAG collaborates with Endpoint Secure to enforce Proxy Avoidance Protection on any user attempt to use this application for bypassing the security perimeter more effectively. The R&D team within Sangfor employs a dedicated team of application signatures security experts who are continuously categorizing and adding the latest proxy avoidance applications to ensure that detection rate and blocking capabilities are current and up to date.

Intelligent Traffic Management
Sangfor IAG improves bandwidth utilization by more than 30% using three unique major traffic management solutions. Dynamic Traffic Control automatically adjusts traffic control policies and intelligently allocates idle bandwidth resources. Intelligent Flow Control manages both up-link and down-link P2P traffic and can customize traffic “packages” for different users, allocating specific traffic quotas and limiting bandwidth for heavier users.

Gateway and Client Decryption to Uncover Encrypted Traffic
Typically, most of the internet traffic is protected by SSL/TLS encryption. While encryption helps to keep user and corporate data protected and private, it also creates security challenges when it comes to the rapid growth of malware infections and other malicious content. Sangfor IAG offers both decryption methods including gateway and client decryption to overcome these challenges. This enables an organization to have the flexibility to run either one or both in parallel to uncover encrypted traffic according to your corporate IT strategy and planning.

Unified Network-wide Management of all Clients
Sangfor IAG provides Unified Management and effectively controls both Wired and Wireless networks for the entire network. With intuitive and flexible authentication methods, it fully guarantees the security of access control, supporting a variety of traditional authentication methods such as username/password, IP/MAC binding, and a wide array of value-added marketing authentication methods (QR code, SMS, WeChat, social media, OA account, SAML 2.0, third-party system, etc.). Permissions are controlled based on user, application, location, and client types while using IAG or third-party wireless controller as a unified authentication server, building a faster and more cost-effective wireless network.

Precise and Accurate Application Control
Sangfor IAG manages and controls network applications more comprehensively, accurately, and conveniently with the largest application signature database in Asia, which can identify more than 6,000+ applications in its database including 700+ cloud applications, 1,000+ mobile applications, 300+ web applications, and is updated every 2 weeks. In addition, it precisely controls applications according to their specific functions, such as distinguishing upload, download, and other actions in the network. Finally, bulk management mode for large enterprises greatly improves management efficiency.

Offloading Performance When Using ICAP Integration with Third-Party System
Sangfor IAG can act as an ICAP client to be used with any ICAP server-enabled network appliance by offloading threat protection or other value-added services. In addition, Sangfor IAG provides request and response inspection mode while enabling the ICAP server group to run on a round-robin or concurrent condition.

Secure Onboarding Devices with Endpoint Compliance Check
Sangfor IAG identifies and secures endpoint devices with or without agents, it helps to ensure these devices are connected with compliance and security. You gain visibility and control of what is in your environment without impacting your network performance.

• Cloud Secure Web Gateway (SWG): Deliver a safe, fast web experience that eliminates ransomware, malware, and other advanced attacks with real-time, AI-powered analysis and URL filtering from the only leader in the 2020 Gartner MQ for SWGs.
• Cloud Access Security Broker (CASB): Secure cloud apps with integrated CASB to protect data, stop threats, and ensure compliance across your SaaS and IaaS environments.
• Cloud Data Loss Prevention (DLP): Protect data in motion with full inline inspection and advanced measures like exact data match (EDM), optical character recognition (OCR), and machine learning.
• Zscaler Firewall & cloud IPS: Extend industry- leading protection to all ports and protocols and replace edge and branch firewalls with a cloud native platform.
• Zscaler Sandbox: Stop never-before-seen and elusive malware across web and file transfer protocols with AI-driven quarantine, sharing consistent and global protection across all users in real time.
• AI-Powered Cloud Browser Isolation: Make web-based attacks obsolete and prevent data loss by creating a virtual air gap between users, the web, and SaaS.
• Digital Experience Monitoring: Reduce IT operational overhead and speed up ticket resolution with a unified view of application, cloud path, and endpoint performance metrics for analysis and troubleshooting.
• Zero Trust Branch Connectivity: Reduce risk and complexity with non-routable branch and data center connectivity for users, servers, and IOT/OT devices.
• DNS Security: Optimize DNS security and performance for all users, devices, and applications, on all ports and protocols, anywhere in the world.

Introducing Trend Vision One™ — Zero Trust Secure Access:
Secure Access is part of Trend Vision One™. The modern cloud-native platform integrates attack surface risk management (ASRM), extended detection and response (XDR), and Secure Access.Through Trend Vision One, organizations can enrich continuous adaptive risk and trust assessment to drive zero-trust architectures that support their business objectives. With Secure Access, no user or device should be inherently trusted.In relation to SSE, Secure Access provides secure web gateway (SWG), cloud access security broker (CASB) and zero trust network access to secure access of users and devices across network, web, cloud, and private apps—all in one platform. This strengthens your overall security posture by enforcing strong access control permissions from multiple identity services across the organization.

• Deliver a superior user experience: Connecting users directly to private apps eliminates slow, costly backhauling over legacy VPNs while continuously monitoring and proactively resolving user experience issues
• Minimize the attack surface: Applications are made invisible to the internet preventing unauthorized users and devices from discovering them. The inside-out connections between user and app ensures apps and IPs are never exposed
• Enforce least-privileged access: Application access is determined by identity and context— not an IP address—and users are never put on the network for access
• Eliminate lateral movement: Applications are segmented so that users can only access a specific app, helping limit lateral movement
• Stop cyberattacks with complete inspection: Private app traffic is inspected inline to prevent the most prevalent web attack techniques
• Prevent data loss: Integrated DLP for private apps, advanced incident response and data classification to protect crown jewel apps
• Detect compromised users and devices: Integrated decoys work to quickly identify and remove malicious users and devices