SWG
Secure Web Gateway
The SASE defense to stopping Internet threats.
Part of Versa SASE, Versa Secure Web Gateway (SWG) provides secure Internet access to enterprise sites, home offices, and on-the-go users without compromising performance or end-user experience.
Cloud Adoption and Mobility Are Driving Demand
Cloud adoption and mobility have significantly altered today’s application landscape. Data is no longer restricted to physical data centers centrally managed by an IT organization. Data is now distributed across various SaaS, public, and private cloud platforms making it difficult for organizations to get visibility and control.
In addition to the various locations where data is stored or in transit to and from, users have grown more mobile, accessing data and applications on-the-go on a multitude of devices. At the same time, workplace dynamics have also changed substantially with the impact of COVID-19 driving an unprecedented number of employees to work from home, and many organizations are now contemplating switching to mainstream WFH to cut down on operational costs.
An Expanded Perimeter Requires a New Approach
All these factors have led to a tremendous expansion of the network edge, in turn creating a large, distributed attack surface. With applications, data, users, and devices increasingly shifting off-premises, the conventional perimeter-based security model with hub-and-spoke architecture and legacy firewall has become obsolete.
Protecting on-premises, home office, and on-the-go users in today’s attack landscape requires a new class of firewall that is integral to the cloud. It requires a firewall that delivers comprehensive and effective security with the best user experience for enterprise and cloud applications for users connecting from anywhere.
Versa SWG protects users and their devices from threats from the Internet and enforcing corporate security policy: ensuring that every connection is secured.
Ensuring Safe User and Device Access to the Internet
With Versa Secure Web Gateway, customers can achieve a comprehensive security solution that includes URL filtering, malware protection, next-generation firewall, Domain Name System (DNS) security, multi-factor authentication, and more.
Intrusion and Vulnerability Protection
Market leading IPS engine with signature and anomaly-based detection and prevention that extensively covers vulnerabilities of the last 10 years. Provides security for all devices with different potential vulnerabilities and exploits—different operating systems, IoT devices, and BYOD.
Web Traffic Management
URL traffic management for millions of sites managed simply by categorizing them into 83 pre-defined classes based on type, risk and other factors. Built-in encrypted web traffic analysis for HTTPS flows and DNS Proxy and DNS Security to secure and manage DNS inquiries and resolutions. Rich set of routing protocols supported natively to enable traffic routing and management decisions.
Secure Proxy
SSL-TLS Proxy to terminate encrypted sessions and to apply detailed security scans to ensure no vulnerability or malware hides within encrypted flows and to apply security policies on specific flows defined by Network Administrators.
Application Identification and Control
Identification of cloud applications, millions of sites, and 3600+ native applications or protocols. Continuously updated identification engine with new signatures, full visibility, and control of applications and traffic with application segmentation and breakout at the gateway.
Extensive Traffic Identification
Identification of thousands of applications, encrypted URLs, users, and devices by using techniques such as DPI, user and group identification, device fingerprinting, and more.
Malware Protection
Web filtering to prevent traffic from going to undesired, out of compliance, illegal or virus or malware spreading sites. Support for commonly used file transfer protocols: HTTP, HTTPS, SMTP, POP, IMPA, MAPI, FTP
Protect against threats. Ensure visibility and control over data. Reduce costs and complexity.
Versa SWG offers an intuitive, easy-to-use portal that provides organizations protection from malware and threats, instant insight for policy management, and reduces end-user friction.
Secure Connection Everywhere
Versa SWG best suits today’s heterogenous, distributed networks. Versa SWG provides secure, direct internet access to users regardless of their location. By leveraging shared threat intelligence, Versa SWG enforces dynamic security remediation depending on the risk and context.
Centralized Visibility and Control
Versa SWG includes an intuitive and easy-to-use cloud-portal for provisioning, management, and monitoring of security, routing, and SD-WAN services. Versa provides a single-pane-of-glass to achieve centralized visibility and granular control over internal, inbound, and outbound traffic.
Simple, Easy-to-Use, and Cost-Effective
Versa SWG comes with a unified policy framework with one-touch deployment. This policy framework covers devices and applications independent of deployment and access, providing simple policy deployment, configuration, and management.
Assured User Experience
Versa SWG leverages the distributed system of Versa Cloud Gateways for optimized cloud connectivity to enable low latency and high-performance connections to popular cloud services. Versa SWG connects to multiple gateways based on enterprise policies and real-time network information to provide the best possible end-user experience.
Are you ready to implement SASE?
Listen to how you can ready yourself for SASE.
Today's network architectures are failing to meet the requirements for digital business. In turn, a new approach is needed and ultimately, businesses need to be getting ready for a SASE transformation.
How to Deploy Versa SASE
Versa SASE is available in an array of deployment options, allowing you to tailor the solution to your network environment.
On-Premises
Available as software to deploy in on-premises hardware including appliances, bare metal, hypervisors, or containers.
Cloud
Available as a service delivered via the cloud for networking, security, and analytics to thin branches and end users.
Blended
Available as a blended combination of SASE services via the cloud and on-premises for any location profile.