1. Norman SecureSurf Protect your users when surfing the Internet

2. The challenge

3. Legitimate sites are now the biggest source of malware, safe surfing practices are not enough. Even legitimate websites, inadvertently spreads malware or act as phishing sites – Ad networks – Exploited sites – Inserted malicious content – Drive-by infections A trend that we have observed is that hackers will insert their malicious code into legitimate JavaScript hosted on the website. - nakedsecurity.sophos.com “The Web has become the new threat vector of choice by hackers and cyber criminals to distribute malware and perpetrate identity theft, financial fraud and corporate espionage.” -- IDC Attackers often use websites to conduct phishing attacks or distribute malware(…) In many cases, these sites are legitimate websites that have been compromised by malware, SQL injection, or other techniques in an effort by attackers to take advantage of the trust users have invested in them. - Microsoft Security Intelligence report 14

4. Avenues of Attack Top Five Categories for Entering Malware Networks by Percentage of Requests Source: Blue Coat Systems 2012 Web Security Report June 2012: 9500 new malicious websites every day - Google

5. The Solution: Norman SecureSurf Easy-to-use Web Security solution for businesses of all sizes – Prevents web-based infections by monitoring websites for malicious content – Increase productivity of your company by regulating internet usage through category-based web filters. – User friendly interface including extensive statistics and reports. Hosted service – No installation of software / hardware required – Set up on the fly, fully functional within hours

6. Why Norman SecureSurf?

7. Layered Security – Stronger Protection Categorization Built-in malware protection Client security Prevent access to unwanted sites Protects against infections on allowed sites Increases the level of protection

8. Categorization – First line of defense Secures The Network Environment Manages Bandwidth Enforces Business- focused Internet Access Reduces Liability

9. Built-in malware protection Unprotected All traffic allowed to the end-users Protected with SecureSurf All Web addresses are tested against a continuously updated list of malicious websites, blocking them immediately

10. Easy administration Intuitive interface Instant overview Full control

11. Client protection Clear warning directly in web browser Stay protected, even when you’re out of the office * * Requires local installation of SecureSurf agent Clear end-user information

12. Why Web Protection as a Service? Lower upfront costs Ease and Speed of Deployment – No on-site hardware or software to maintain, upgrade, or support – Simply redirect Web traffic Fixed operational expense instead of a capital expense Protect your users, even when not in the office

13. Norman SecureSurf - features

14. Cloud-based Web Protection Features & Benefits – Shields networks from malware, adware and viruses – Protects employees; improves productivity – Allows filtering at company or workgroup level – Easy set up and deployment – Intuitive browser-based Web Portal Access for Administrators

15. Customized filtering Pre-defined restriction groups Customize your own filter Block or allow based on domain name, country or category

16. Enforce Safe Search Enforce safe search on major search engines

17. Protect even when out of the office Protect your network by enforcing SecureSurf DNS through DHCP or SecureSurf agent SecureSurf server Protect remote users by enforcing SecureSurf DNS through SecureSurf agent

18. Agent allows for individual policies SecureSurf Agent allow for individual policies and protects mobile users when they’re not in the network Block access on network level

19. SecureSurf – Summary Easy-to-use Web Security solution for businesses of all sizes – Prevents web-based infections by monitoring websites for malicious content – Increase productivity of your company by regulating internet usage through category-based web filters. – User friendly interface including extensive statistics and reports. Hosted service – No installation of software / hardware required – Set up on the fly, fully functional within hours SecureSurf agent – Protect your users, even when they’re not connected to the company network

20. In depth - technical

21. DNS redirection SecureSurf is based on DNS redirection DNS server checks if requester is known. – If known requester, it will filter Malicious content – Domain and IP reputation – URL reputation – Zero-hour info Categories based on filters

22. SecureSurf implementation Network – Apply policies and filters to entire network – Every end user is protected by the same policy – Allows protection for multiple networks Agent – Apply policies and filters to individual end users or groups – Allows for customization – Meets the needs of each department or employee – Great for remote users (e.g., Sales)

23. SecureSurf Soft Components Networks Policy Domain & IP Reputation Tests Computers Users URL Reputation Zero-Hour Categorization Allow Actions Proxy Block Categorization engine tags requests based on the destination. Multiple sources of reputation data are used. Allow / Block Lists Policy is applied in order by User, Computer OR Network.

24. Proxied blocked pages When page blocked due to malicious content or category filter: – End-user will be re-directed to proxied web page – Including information on why page was blocked

25. Thank you