Virtual Secure Web Gateway

 View Only
  • 1.  Can we use the SWG to protect the Web servers ?

    Posted Feb 28, 2011 09:41 PM

    Dear Sir,

    We have about 60 web servers,these web servers are allowed to be accessed by internet users. 

    We want to protect these web servers.

    Whether we can implement a SWG (Symantec Web Gateway) in front of these web servers to protect them?

    Some questions below.

    1.Can SWG block the attacks from the internet?

    2.Can SWG block the virus or spyware uploaded from the internet?

    3.How does the SWG detects the threats?

      Inbound or (both inbound and outbound)

    Thanks a lot.



  • 2.  RE: Can we use the SWG to protect the Web servers ?
    Best Answer

    Posted Mar 01, 2011 04:06 PM

    Hello,

    First off all this this forum for Brightmail Gateway,i think forum moderators move this to under SWG forums.

    Anyway,

    1-SWG can block attacks from internet to servers and from servers to internet but SWG is not an IPS appliance,so it's better use an IPS in front of your web servers.

    2-SWG have great antivirus engine (Symantec Scan Engine) to protect your networks from malware,so yes it can block.

    3-As i said in first , SWG can scan traffic both inbound and outbound.

     

    For a best practice to secure your web servers. Deploy a firewall and ips in front of your web servers,install symantec endpoint protection with IPS module and fine tune some signatures to prevent false positives. 

    Regards,

    Oykun



  • 3.  RE: Can we use the SWG to protect the Web servers ?

    Posted Mar 01, 2011 04:15 PM

    I've moved this to the SWG section of the forums.

    Also SWG is not meant to protect your webservers from attacks or the internet at large from things like DDoS attacks.

    While it can scan traffic both ways and block traffic both ways but it is meant to block and report website usage and application control for internal traffic to the internet by internal users.



  • 4.  RE: Can we use the SWG to protect the Web servers ?

    Posted Mar 09, 2011 09:41 PM

    Thanks for your help.