Finjan Secure Web Gateway
Solutions For Enterprises

Advanced Authentication

With the widespread use of Internet, it has become essential for enterprises to be able to positively identify users before granting them access to IT resources. Unauthorized access to confidential data can have serious consequences such as loss or theft of: personal, sensitive or confidential data; patient information, intellectual property (IP), etc. It can also lead to potential lawsuits and class actions, including repercussion for non-compliance with rules and regulations.
Many regulations such as SOX, HIPAA and PCI demand strong authentication, which is also effective in preventing identity theft.

Finjan Secure Web Gateway interfaces with existing authentication servers to enable authentication/identification and authorization, along with group and user-level policy enforcement and reporting. To meet the individual and specific needs of organizations, multiple directory servers are supported.

Administrators can easily set up user authentication based on Microsoft Active Directory® or other LDAP servers, without the need for installation of any additional software. Authentication policies are flexible and support various network attributes to enable different authentication services for different users/user-groups.

User authentication based on LDAP directories

Finjan Secure Web Gateway also supports RADIUS authentication for administrators. Since RADIUS is an authentication protocol generally used for remote access, it requires strong authentication to verify administrators’ identity.

RADIUS Authentication for authentication of administrators

• Authentication/identification based on MS Active Directory® and other LDAP servers, followed by enforcement of the appropriate security policy
• Authorization and identification methods include LDAP-based (multiple servers supported), HTTP Basic, Microsoft NTLM and IP-based
• Import of users and groups from LDAP Directories (such as Open LDAP, Sun ONE, Tivoli/IBM and MS Active Directory®) is supported
• Usage of multiple servers for each LDAP definition (both primary and backup) is supported
• Typically deployed in the '”demilitarized zone” (DMZ), the Scanning Server enables the creation and enforcement of authorization policies based on MS Active Directory® authentication, port, user-selected URL, HTTP Headers, or the originating IP of the user
• Supports multiple Active Directory (AD) domains without requiring an AD server plug-in
• Supports different identification methods (Originating IP, Username/Password, URL/Port) using special policies, as well as multiple isolated Active Directory Domains
• For large enterprises, scalable authentication is available

Finjan Solutions Overview

Enquiry

Top of Page