M86 network device stops enemies at the gate

Protecting users as they connect to the Internet is a critical challenge for network administrators, one that only grows with an organization’s size. Enforcing an across-the-board security policy is hard enough for users who physically log in to a network — and it's even harder for remote users. But don’t get me started on remote users.

Actually, do get me started. That’s because the Secure Web Gateway (SWG) Version 10.0 from M86 Security can help you do just that. It protects users from external threats — and themselves — not only while connecting locally but also when connecting to the network through a laptop or other mobile device. It does the latter through a cloud server, which synchronizes with the SWG appliance and enforces policies for a remote user running a client application.


M86 Secure Web Gateway Version 10.0

Pros: Extensive policy management; can enforce remote users.
Cons: Expensive; a few firewall ports need to be kept open.
Performance: A+
Ease of Use: B
Features: A
Value: B+
Price: $11,110


The model of SWG that we tested came in a single 1U rack-mountable appliance. It contained a scanning server and policy server all in one unit. Larger implementations can have the servers in separate devices or even host multiple scanning servers working in concert with a single policy server.

We found the SWG to be only a few steps more complicated to set up than a typical network appliance. In addition to the usual IP settings, certain ports in the firewall had to be opened for the SWG to talk to the external cloud server. Those ports had to be redirected to the SWG, which uses an internal IP address. And finally, each client must have a browser set to use the SWG as a proxy server. However, none of those tasks should be beyond any network administrator’s skill level. It just takes a little extra time.

In setting up the appliance, we incurred minimal download time for module updates. M86 wisely preloaded every single module that could be used on the SWG appliance, and the device simply unlocks the ones that the customer pays for, even if lots of time has passed between the initial purchase and need for a new module.

After the SWG was set up, it went right to work monitoring the HTTP and HTTP Secure traffic in both directions on our test network. It analyzed the data according to 43 basic policies, ranging from proprietary data going out — the dreaded data leakage — to content coming in from blacklisted sites. It then allowed or disallowed that data transfer depending on the settings. This appliance definitely allows a network administrator to fine-tune a security policy to match agency needs and security objectives.

When an event violates a policy, the SWG generates a log. The logs are displayed in the administrator interface and can be searched and archived for proof-of-compliance purposes.

The SWG’s contextual code analysis enables it to determine whether certain software is malicious. The Real-time Code Analysis engine figures out what the code would end up doing to your system, regardless of where it is coming from or how it might be hidden.

When an otherwise approved website is compromised with a bad section of JavaScript, the SWG can surgically remove the offending code and let the rest of the Web page go through. We found that feature to be especially useful, as even websites of major retailers can have poorly constructed or wrongly implemented code on their Web pages. Every time we tried to browse such a site, the SWG extracted the questionable programming and correctly displayed the HTML.

Another way that the SWG helps prevent data leakage is through its social media control. With this, we were able to keep a user from posting comments to sites such as Facebook while still allowing the user to visit those sites. That is a good compromise that will keep an organization's data secure while keeping its users happy enough not to riot.

But what really sets the SWG apart from similar devices is the way M86 uniformly secures users not only when they are directly logged in to the network but also when they are connected remotely or at a branch office. The cloud server associated with an SWG device is located off-site and constantly synchronizes with the SWG to keep its policies identical. To test that capability, we loaded a client application onto a remote computer. When connected to the Internet, it found the cloud server and used it as a Web proxy, enforcing the policy we had set up on the SWG. That feature could be a real lifesaver.

The price for M86 Security’s Secure Web Gateway Version 10.0 in the configuration we tested came to $11,110. Considering how much work it could save by consistently enforcing a security policy for local and remote users, that is not a bad price at all. Of course, larger-scale implementations are available at proportionally higher costs. The SWG would be ideal for any network administrator who is confronted with a new Internet security policy and needs to launch it quickly and relatively easily.

M86 Security, www.m86security.com

X
This website uses cookies to enhance user experience and to analyze performance and traffic on our website. We also share information about your use of our site with our social media, advertising and analytics partners. Learn More / Do Not Sell My Personal Information
Accept Cookies
X
Cookie Preferences Cookie List

Do Not Sell My Personal Information

When you visit our website, we store cookies on your browser to collect information. The information collected might relate to you, your preferences or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. However, you can choose not to allow certain types of cookies, which may impact your experience of the site and the services we are able to offer. Click on the different category headings to find out more and change our default settings according to your preference. You cannot opt-out of our First Party Strictly Necessary Cookies as they are deployed in order to ensure the proper functioning of our website (such as prompting the cookie banner and remembering your settings, to log into your account, to redirect you when you log out, etc.). For more information about the First and Third Party Cookies used please follow this link.

Allow All Cookies

Manage Consent Preferences

Strictly Necessary Cookies - Always Active

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data, Targeting & Social Media Cookies

Under the California Consumer Privacy Act, you have the right to opt-out of the sale of your personal information to third parties. These cookies collect information for analytics and to personalize your experience with targeted ads. You may exercise your right to opt out of the sale of personal information by using this toggle switch. If you opt out we will not be able to offer you personalised ads and will not hand over your personal information to any third parties. Additionally, you may contact our legal department for further clarification about your rights as a California consumer by using this Exercise My Rights link

If you have enabled privacy controls on your browser (such as a plugin), we have to take that as a valid request to opt-out. Therefore we would not be able to track your activity through the web. This may affect our ability to personalize ads according to your preferences.

Targeting cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Social media cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

If you want to opt out of all of our lead reports and lists, please submit a privacy request at our Do Not Sell page.

Save Settings
Cookie Preferences Cookie List

Cookie List

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Functional Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Performance Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Social Media Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Targeting Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.