protect your internal users on the internet with secure ... · pdf fileprotect your internal...
TRANSCRIPT
![Page 1: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/1.jpg)
Protect your internal users on the Internet with Secure Web Gateway
Richard BibleEMEA Security Solution Architect
![Page 2: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/2.jpg)
F5 Agility 2014 2
Identity and Access Management (IAM) SolutionAuthentication, Authorization, and SSO to All Apps
Remote Access and Application Access
Enterprise Apps
FederationCloud, SaaS,
and Partner Apps
Secure Web GatewayInternet Apps
Mobile AppsEnterprise
Mobility Management
Internet AppsWeb Access Management
Internet
Cloud based web securityTrue identity and context awareBIG-IQ Central management and reporting
![Page 3: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/3.jpg)
F5 Agility 2014 3
US workers spend between 60% - 80% of their time at work surfing non-work related websites.
Employee personal web use at work is a problem
Sources: Salary.com, InsideView, Forbes, Comscore
Update Facebook daily from work*
15%37%
Surf news sites
*Most visited non-work related website
Of “Cyber Monday 2013” purchases made from work
49%
![Page 4: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/4.jpg)
F5 Agility 2014 4
And, web-borne threats becoming more sophisticated and difficult to detect
Watering Hole Attacks Drive-by Downloads Spearphishing
![Page 5: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/5.jpg)
F5 Agility 2014 5
COMPLIANCE COST-SAVINGS
ACCESSIBILITYSECURITY
PRODUCTIVITY
Why web defenses are a necessity today
![Page 6: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/6.jpg)
F5 Agility 2014 6
However, most web defenses fail
LACK OF REAL-TIME INLINE CONTENT
ANALYSIS
FORWARD FACING ONLY, LACKS OUTBOUND
PROTECTION
PRIMARILY BASED ON SIGNATURE AND
REPUTATION
SSL LACKS VISIBILITY“MORE OF THE SAME” IN
NEW DEPLOYMENT OPTIONS
![Page 7: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/7.jpg)
F5 Agility 2014 7
According Gartner, secure web gateway solutions protect Web-surfing PCs from infection and enforce company policies
What is a secure web gateway
Enforce compliance with corporate and regulatory
policies
Must include URL filtering, malicious code detection and
filtering, web app controls, and limits bandwidth
Filter unwanted software and malware from user-initiated
web traffic
HTTP://…
![Page 8: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/8.jpg)
F5 Agility 2014 8
• Acceptable use policy and compliance controls• Context-aware web security/protection• Inbound and outbound malware protection• Bandwidth control and preservation
F5 Secure Web Gateway Services
Employee
Contractor
Home Mobile User
Headquarters
Guest User
Devices
BIG-IP Platform
User Acceptable Policy Control + Context-Aware Web Security + Compliance + Bandwidth Control
+ Web Firewall Services
with SWG
Internet
Inappropriate Websites
Infected Websites
Infected Web Apps
Infected Executable Files –Standalone & Embedded
Visibility & Control
IT/Security Admin
Human Resources
Advanced Threat Intelligence
![Page 9: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/9.jpg)
F5 Agility 2014 9
• Single integrated solution (BIG-IP, VIPRION) vs. two-box (ProxySG + Proxy-AV) solution
• Total cost of ownership savings between 29% - 72%, depending on service (URL Filtering or SWG Services), subscription length (1-year or 3-year), and number of users
F5 Secure Web Gateway Services consolidate infrastructure and maintenance costs
![Page 10: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/10.jpg)
F5 Agility 2014 10
• Reduces chances of human error
• Strengthens policies
• Reduces overhead
• Increases security posture
• Deliver consolidated policy views – both inbound and outbound
F5 Secure Web Gateway ServicesOne-stop for all access policy, inbound and outbound
BIG-IP Platform
with SWG
Internet
Devices
![Page 11: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/11.jpg)
F5 Agility 2014 11
F5 SWG Services Mitigate Threats, Cut Costs, and Increase Productivity and Availability
• Identify and eradicate malicious websites, web-based malware, and APTs
• Simply enforce corporate Web use policies and regulatory compliance
• Plug data leaks• Restrict access to non-work
related web sites based on policy, user, group, time, and more
• Increase bandwidth availability
With SWG
CampusURL Filtering
Internet
Data for real-time URL classification
and advanced malware detection
HQ
SaaS Apps
ServersServersAD
URL Classification
Advanced Malware DetectionAdvanced
Threat Intelligence
![Page 12: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/12.jpg)
F5 Agility 2014 12
• Maps and tracks user identity to network addresses
• Fully tracks activity by user identity and their device
• Enable transparent user-based security policies through F5 User Identity Agent
• Link user identity with endpoint integrity, assuring endpoint health prior to and after Web access
• F5 User Identity Agent runs on a Windows-based server, and pulls information from Active Directory domain controllers
Web access and activity visibility + the only web gateway to secure against inbound and outbound malware
with SWG
ServersActive Directory
URL Classification
Advanced Malware Detection
URL Filtering
F5 User Identity Agent
![Page 13: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/13.jpg)
F5 Agility 2014 13
Advanced Threat Protection
• Real-time threat analysis and intelligence• Composite reputation scoring and predictive analysis• Malware sandbox analysis• Social app and video controls• Graphical reporting and comprehensive logging
BIG-IP Platform
with SWG
Devices
Data
Hacktivism
Malware
State Sponsored Attacks
Attackers
Web Bots
Disallowed/Unapproved Web
Apps
Inappropriate Websites
InsecureWebsites
DisallowedWebsites
InfectedWebsites
Infected Cloud Apps
Robust malware database with over 10,000 web malware
analytics and collection of signature and heuristic
detection engines
Powerful URL categorization engine
and database, constantly classifying over 40 million URLs
Real-time threat intelligence analyzing
and processing up to 5 Billion content
requests/day
Advanced Threat Intelligence
![Page 14: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/14.jpg)
F5 Agility 2014 14
Flexible deployment options limit network change and churn
Web App Servers
HTTP(S)Client
HTTP(S)Client
HTTP(S)Client
BIG-IP Platform
URL Filtering
Web App Visibility & Control
Proxy: <f5swg_ip>:<f5swg_port>
Connect: <f5swg_ip>User: user_id@<dest_host>
Internet
Explicit Proxy Mode
InfectedLaptop
Tablet
Laptop
Desktop
Client
Client
Client
Client
BIG-IP Platform
with SWG
Internet
Remote Client
Mobile Client
Web Surfing (HTTP/HTTPS)
Access Policy Management
URL Filtering (Outbound)
Social Media App Controls
Inline Transparent Proxy Mode
Off-premise web traffic
On-premise web traffic
with SWG
![Page 15: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/15.jpg)
F5 Agility 2014 15
Secure Web Gateway architecture diagram
MaliciousSite
MalwareStrategic Point of Control
Cloud-BasedThreat Intelligence
PCI CDE
Corporate Network
Wireless Guest Network
Secure WebGateway
Services
DDoSProtection
Next-Generation
Firewall
Server Server
Server Server
Contractors
Employees
Web Application Firewall
Salesforce.com
E-Commerce
B2B Server
Update Server
Web APIs
Entertainment Site
YouTube
FacebookGames
ViralVideo
ActiveDirectory
Internet
![Page 16: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/16.jpg)
F5 Agility 2014 16
Secure Web Gateway solution diagramContext-Aware Web Security
Corporate Network
Remote Users
BandwidthControls
Acceptable Use Policy Controls
Compliance
Customer Scenarios
Cloud-Based Threat Intelligence
Centralized Management
UserIdentification/Endpoint Inspection URL Filtering
Web AccessPolicy
Enforcement
MalwareProtection
IdentityFederation
Professional Services and Support
Visibility (Logging)Human Resources
Contractor Employee PCI CDE
Guest User Mobile User
Control (Reporting)IT/Security Admin
Secure WebGateway Services
Customer Functionality
Acceptable Websites
Infected Executable
Files
Update Servers
Infected Web Apps
SaaS
Inappropriate Websites
![Page 17: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/17.jpg)
F5 Agility 2014 17
Secure Web Gateway solution diagramContext-Aware Web Security
Corporate Network
Remote Users
BandwidthControls
Acceptable Use Policy Controls
Compliance
Customer Scenarios
Cloud-Based Threat Intelligence
Centralized Management
UserIdentification/Endpoint Inspection URL Filtering
Web AccessPolicy
Enforcement
MalwareProtection
IdentityFederation
Professional Services and Support
Visibility (Logging)Human Resources
Contractor Employee PCI CDE
Guest User Mobile User
Control (Reporting)IT/Security Admin
Secure WebGateway Services
Customer Functionality
Acceptable Websites
Infected Executable
Files
Update Servers
Infected Web Apps
SaaS
Inappropriate Websites
![Page 18: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/18.jpg)
F5 Agility 2014 18
Secure Web Gateway solution diagramContext-Aware Web Security
Corporate Network
Remote Users
BandwidthControls
Acceptable Use Policy Controls
Compliance
Customer Scenarios
Cloud-Based Threat Intelligence
Centralized Management
UserIdentification/Endpoint Inspection URL Filtering
Web AccessPolicy
Enforcement
MalwareProtection
IdentityFederation
Professional Services and Support
Visibility (Logging)Human Resources
Contractor Employee PCI CDE
Guest User Mobile User
Control (Reporting)IT/Security Admin
Secure WebGateway Services
Customer Functionality
Acceptable Websites
Infected Executable
Files
Update Servers
Infected Web Apps
SaaS
Inappropriate Websites
![Page 19: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/19.jpg)
F5 Agility 2014 19
• Annual Subscription services – 1-year or 3-year subscriptions
• Pricing ranges depending on platform – Virtual, BIG-IP or VIPRION– and number of filtering sessions (500 – 80,000)
• Only activated on top of F5 Access Policy Manager (APM) enabled platforms
• Session limits are defined and enforced on each platform ensuring future capacity and security service expansions
Accommodating licensing models
![Page 20: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/20.jpg)
So lets look at the details…
![Page 21: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/21.jpg)
F5 Agility 2014 21
Option #1: Secure Web Gateway • URL classification and filtering (as defined)• Support for custom URL categories (URL white/black lists)• Connection to cloud-based threat intelligence infrastructure• Web-based malware and advanced threat protection• Granular social web applications detection and control• User identification • User based policy, graphical reporting and logging
Option #2: URL Filtering• URL classification and filtering (as defined)• Support for custom URL categories (URL white/black lists)• Connection to cloud-based threat intelligence infrastructure• Granular social web applications detection and control• User identification • User based policy, graphical reporting and logging
Adaptive subscription-based security services
with SWG
ServersServersAD
URL Classification
Advanced Malware Detection
URLFiltering
Data for real-time URL classificationand advanced malware detection
Advanced Threat Intelligence
![Page 22: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/22.jpg)
F5 Agility 2014 22
• Real-Time Security Classification – Empowers social web controls, and inspects all web content for malicious or suspicious code such as open or obfuscated scripts, exploit code and iframe tags
• Real-Time Content Classification – Employs advanced machine learning to quickly and accurately classify pages based on content including images, multimedia, and links
• Real-Time Data Classification – Classifies structured and unstructured data with paring and decoding support to address outbound data theft
• Anti-Malware Engines - Applies multiple anti-malware engines to identify both general and specialized malware
• Reputation Analysis - Considers more than twenty characteristics for detailed assessment and more accurate reputation scoring that encompasses contextual awareness
• URL Classification - Used independently and in conjunction with other defense assessments to apply current classification information for known pages, or to help assess new pages and links
• Anti-Spam/Spear-Phishing –Provides matchless, proactive protection against traditional and emerging threats in email
![Page 23: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/23.jpg)
F5 Agility 2014 23
• Three types of updates
Database Update Types
Type of download Schedule DescriptionMaster Daily, sometime during the
specified update windowUpdates the categories and the URL’s in them
RTSU Every 5 Minutes, not configurable
Real time updates, that is the latest URLs that have been categorized
ACE Every 5 Minutes, not configurable
Updates data that is used for Analysis, when necessary, to categorize a URL further
![Page 24: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/24.jpg)
URL Categorization
![Page 25: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/25.jpg)
F5 Agility 2014 25
• Custom categories may be added, in addition to the default categories that you want to block or allow
• Custom Categories that you add become subcategories of Custom Categories
• Custom Categories take precedence over other categories
URL Categories
![Page 26: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/26.jpg)
F5 Agility 2014 26
• Facebook Posting: Facebook function that enables a user to share a post, status or link.
• Facebook Commenting: Facebook function that enables a user to comment or like.
• Facebook Friends: Facebook function that enables a user to add a connection.
• Facebook Photo Upload: Facebook function that enables a user to upload a photo.
• Facebook Mail: Facebook function that enables a user to send an email within the Facebook community.
• Facebook Events: Facebook function that enables a user to create, modify or respond to an event within the Facebook community.
• Facebook Apps: Facebook function that enables a user to access or utilize an app.
• Facebook Chat: Facebook function that enables a user to chat within the Facebook community.
• Facebook Questions: Facebook function that enables a user to ask a question within the Facebook community.
• Facebook Video Upload: Facebook function that enables a user to upload a video.
• Facebook Groups: Facebook function that enables a user to create, modify or join a group within the Facebook community.
• Facebook Games: Facebook function that enables a user to access or play a game.
Social Web Filters - Facebook
![Page 27: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/27.jpg)
F5 Agility 2014 27
• LinkedIn:• LinkedIn Updates: LinkedIn function that enables a user to edit a profile or post an update. • LinkedIn Mail: LinkedIn function that enables a user to send an email within the LinkedIn community. • LinkedIn Connections: LinkedIn function that enables a user to add a connection. • LinkedIn Jobs: LinkedIn function that enables a user to perform activities related to job search
• Twitter:• Twitter Posting: Twitter function that enables a user to post an update. • Twitter Mail: Twitter function that enables a user to send an email within the Twitter community. • Twitter Follow: Twitter function that enables a user to add a connection.
• YouTube:• YouTube Commenting: YouTube function that enables a user to comment, like or dislike. • YouTube Video Upload: YouTube function that enables a user to upload a video. • YouTube Sharing: YouTube function that enables a user to share a video within and outside of the YouTube
community.
Social Web Filters – LinkedIn, Twitter, & YouTube
![Page 28: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/28.jpg)
F5 Agility 2014 28
• Secure Web Gateway (SWG) supports HTTP and HTTPs-based instant messaging protocols
• As a result, when you use the Instant Messaging URL category to block messages, SWG can block messages to ICQ, for example, but cannot block messages from applications that use non-standard ports or tunneling over HTTP , such as, Yahoo Messenger, Skype, Google Talk, and so on
• Similarly , SWG cannot block messages from file-sharing and peer-to-peer protocols that do not use HTTP or HTTPs; most do not
SWG and Instant Messaging
![Page 29: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/29.jpg)
URL Filtering
![Page 30: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/30.jpg)
F5 Agility 2014 30
• Default URL Filters such as block-all and basic-security are available
• You cannot delete any of the default filters, you can create new filters or copy existing ones
Default URL Filters
![Page 31: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/31.jpg)
F5 Agility 2014 31
• Blocks the Security URL Category, and allows all other categories
Basic Security URL Filter
URL Categories URL Filters
![Page 32: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/32.jpg)
F5 Agility 2014 32
• Custom URL Filters allow admin to Allow or Block any category or sub-category
URL Filters
![Page 33: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/33.jpg)
F5 Agility 2014 33
• To block URLs that SWG cannot categorize, expand the category Miscellaneous, and select Uncategorized
• To use a URL Filter you must add it to a Scheme
URL Filters
![Page 34: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/34.jpg)
Secure Web Gateway Schemes
![Page 35: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/35.jpg)
F5 Agility 2014 35
• You configure schemes to specify and schedule a group of URL filters that you want to apply to users
Schemes
What to do on uncategorized URL
Scan responses for malicious content
![Page 36: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/36.jpg)
F5 Agility 2014 36
Bringing it all together with APM VPE
![Page 37: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/37.jpg)
Logging and Reporting
![Page 38: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/38.jpg)
F5 Agility 2014 38
Sample Error/Blocking Messages
![Page 39: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/39.jpg)
F5 Agility 2014 39
Policy, User Identity, Reports and Logs
![Page 40: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/40.jpg)
Where to get more information
Follow up with your F5 channel partner and/or account manager
For detailed information, please go to f5.com/architectures
If I can be of further assistance please contact me:
[email protected] | +44 7919408772
![Page 41: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/41.jpg)
![Page 42: Protect your internal users on the Internet with Secure ... · PDF fileProtect your internal users on the Internet with ... Update Facebook daily from work* 37 ... • Anti-Spam/Spear-Phishing](https://reader033.vdocuments.net/reader033/viewer/2022051721/5a8e1c4a7f8b9a4a268d0b77/html5/thumbnails/42.jpg)