Guest

Cisco IronPort Web Security Appliances

Cisco IronPort Web Security Monitor

Strengthen Defense with Comprehensive, Accessible Security Data

Overview

Securing your network against a broad range of spyware and other web-based malware requires a highly efficient web security platform, capable of providing accurate information and continual feedback. Cisco IronPort S-Series web security appliances perform comprehensive, real-time monitoring and reporting. Network administrators gain unprecedented visibility with data that is easy to collect and use.

Cisco IronPort Web Security Monitor is a real-time threat monitoring and reporting system, integrated into every Cisco IronPort web security appliance. Web Security Monitor tracks all network traffic to identify a broad range of web security threats.

Download Data Sheet

Features

Holistic View of Web Security Status

An easy-to-understand system overview report profiles all web transactions, instantly identifies top threats, and displays an at-a-glance indication of the current operating state of each Cisco IronPort appliance. Easily demonstrate return on investment (ROI) by reviewing the percentage of transactions handled by Cisco IronPort's Web Reputation and Anti-Malware filters.

Figure 1
Cisco IronPort Web Security Monitor's intuitive GUI enables visibility into your current and historical web traffic.

Layer 4 Traffic Monitor information helps you identify compromised network ports and detect malware "phone home" activity that attempts to bypass Port 80.

Figure 2
Top-level graphs highlight important data points, and detailed information is available in tabular format.

End-user reports show users browsing sites with the most malware and also pinpoint potentially infected machines on your network. Use this valuable information to proactively manage risky behavior and plan cleanup activities for infected machines.

Figure 3
Instantly identify systems infected with malware using the Client Activity report.

Detailed, systemwide malware reports identify the top malware categories as well as specific instances of malware detected on your network. Assess the security of your network against high-profile threats and develop policies to manage the top malware risks.

Figure 4
Web Security Monitor's Anti-Malware report provides comprehensive visibility into malware threats on your network.

Web Reputation, data powered by the Cisco IronPort SenderBase Network, shows how much web traffic was blocked by reputation and provides valuable insight into web reputation trends.

Figure 5
By integrating SenderBase data, Cisco IronPort Web Security Monitor accurately assesses the threat level of every HTTP request.

Powerful Reporting Engine

PDF snapshots allow you to capture the current view of a report you are viewing in an Adobe PDF file. Save or print the file for easy future reference.

Regularly scheduled reports can be configured for delivery over email or archived to the local system in PDF format. All real-time reports are available for periodic scheduled delivery.

Figure 6
Easily schedule reports for delivery on a daily, weekly, or monthly basis.

On-demand report generation provides instant access to reporting data on your appliances. Dig deeper into a particular security incident by viewing all reports for a specific timeframe.

Download reporting data in CSV format for easy integration with existing monitoring solutions. Simply click the “Export” links in the GUI or create automated scripts to export the reporting data from the Cisco IronPort S-Series appliances.

Figure 7
Flexible reporting capabilities allow you to instantly access historical reporting data on your appliance.

Benefits

  • Reduce Administrative Overhead: Simple, easy-to-understand, real-time reports allow you to instantly assess the overall status of your network security. You no longer need to search through and post-process logs from multiple systems on your network.
  • Integrate with Existing Solutions: All reporting data is available in industry-standard CSV format. Protect your investment in enterprise reporting solutions by simply importing web security data from the Cisco IronPort appliances.
  • Enhance Network Security: Cisco IronPort Web Security Monitor provides a holistic view into the spyware and other web-based threats in your network, enabling you to make critical security decisions. Protect your users from unwanted threats, and protect your business from critical downtime and lost opportunities.
  • Plan Specific Cleanup Activities: Reports from the Layer 4 Traffic Monitor help you quickly identify potentially compromised hosts on your network. These actionable reports help you to minimize the time wasted on forensics and focus your efforts on cleaning up infected hosts.
  • Measure Your ROI: See exactly how Cisco IronPort leads the industry in providing remarkably effective web security solutions. Information about each element of Cisco IronPort's unique multi-layer, multi-vendor malware protection is readily available. Easily scheduled ROI reports are automatically delivered for management review.

Availability

Cisco IronPort Web Security Monitor is available on all Cisco IronPort S-Series appliances.


Additional Resources