Security Empowers Business

SO

LU

TIO

N B

RIE

F

Clearswift and Blue Coat Partner to Provide a Highly Scalable Web Security PlatformThe need to protect critical information assets is a priority for all organizations. At the same time, regulations are being implemented and enforced with large financial penalties in cases of information breach. The majority of information leaks happen through the Internet gateways, hidden as common data types or standard browsing traffic. Unfortunately, many organizations take the approach of relying on standalone security architectures that do not meet the increased complexity of today’s advanced threat environment. While these may cover simple security needs, there is a necessity to take control and act to remediate critical information losses. Clearswift and Blue Coat have partnered together to provide a highly scalable web security platform able to detect information security issues and transparently resolve them in a pro-active manner before the loss, alerting organizations to the potential breach immediately.

The Information Paradox

During the last decade there has been an evolution in how companies manage, store, secure and share information. The explosion of new communication methods – like Web 2.0 and smart media devices – and the increased need to collaborate at anytime, anywhere with consumers, partners and customers has increased by orders of magnitude the amount of information being communicated. These advancements in technology and collaboration have resulted in an important shift from information being treated as a cost to being one of the most valuable assets for businesses to grow and differentiate. At the same time, current and planned regulations are focusing on protecting personal and corporate information with substantial penalties in the case of breach and/or non-compliance.

As information has grown at an exponential rate, the number of security personnel has not maintained alignment, struggling to implement essential information security techniques. Migrating platforms is painful, but the existing ones may not be meeting requirements.

Blue Coat and Clearswift Integration

Addressing the need to widen a pro-active advanced threat protection strategy, whilst also accurately identifying and protecting critical information assets, Blue Coat and Clearswift have worked together

to provide a solution that provides the unique opportunity to address unauthorized information collaboration

The resulting platform takes advantage of the perfect match between both technologies to provide some unique key features:

• Adaptive Redaction to modify requests and responses to prevent data loss and targeted attacks from infecting the organization

• Deep content inspection to identify data fingerprints and hidden meta data

• Complete protection and control, including SSL connections for decryption and inspection

• Layered defenses for complete web protection

The deployment is greatly simplified by using ICAP, which allows decisions to be made based upon policy rules, identifying which content, from/to which user and to/from which site, needs to be inspected.

This is an industry recognized integration method for Blue Coat administrators and requires just three simple steps:

• Configure the ICAP service groups in Blue Coat, as shown in figure 1

• Set the policy to redirect specific traffic to the Clearswift ICAP Gateway for inspection

CLEARSWIFT AND BLUE COAT INTEGRATION

Security Empowers Business

SO

LU

TIO

N B

RIE

F

• Configure the Clearswift ICAP Gateway to accept connections from the Blue Coat ProxySG, as shown in figure 2

Once the integration is done, the inspection policy can be configured in the SECURE ICAP Gateway.

Clearswift Technology Overview

Clearswift’s deep content inspection technology can recursively decompose the communication flows to granularly apply information security policies.

The SECURE ICAP Gateway can perform true data type detection even with embedded objects. Once identified, the information is then extracted and analyzed to detect potential data breaches.

In order to simplify the definition of the content security policy, predefined templates with common dictionaries are provided. The ability to detect tokens, like credit card numbers, and to obtain content from structured data sources – such as databases – makes it even simpler to determine the nature of the information and to drastically reduce the number of false positives.

Blocking violations is the first approach that companies tend to think of when talking about data losses. Even though this might be valid in some cases, Clearswift introduces technology to modify the content to remove the offending content while allowing the rest of the communication to happen. Even hidden meta-data which might contain revision history or quick save data is stripped out. Business processes are not hindered and the critical information asset is protected.

Figure 1

Figure 2

Security Empowers Business

SO

LU

TIO

N B

RIE

F

© 2014 Blue Coat Systems, Inc. All rights reserved. Blue Coat, the Blue Coat logos, ProxySG, PacketShaper, CacheFlow, IntelligenceCenter, CacheEOS, CachePulse, Crossbeam, K9, the K9 logo, DRTR, Mach5, Packetwise, Policycenter, ProxyAV, ProxyClient, SGOS, WebPulse, Solera Networks, the Solera Networks logos, DeepSee, “See Everything. Know Everything.”, “Security Empowers Business”, and BlueTouch are registered trademarks or trademarks of Blue Coat Systems, Inc. or its affiliates in the U.S. and certain other countries. This list may not be complete, and the absence of a trademark from this list does not mean it is not a trademark of Blue Coat or that Blue Coat has stopped using the trademark. All other trademarks mentioned in this document owned by third parties are the property of their respective owners. This document is for informational purposes only. Blue Coat makes no warranties, express, implied, or statutory, as to the information in this document. Blue Coat products, technical services, and any other technical data referenced in this document are subject to U.S. export control and sanctions laws, regulations and requirements, and may be subject to export or import regulations in other countries. You agree to comply strictly with these laws, regulations and requirements, and acknowledge that you have the responsibility to obtain any licenses, permits or other approvals that may be required in order to export, re-export, transfer in country or import after delivery to you. v.SB-CLEARSWIFT-INTEGRATION-EN-v1c-0114

Blue Coat Systems Inc. www.bluecoat.com

Corporate Headquarters Sunnyvale, CA

+1.408.220.2200

EMEA Headquarters Hampshire, UK

+44.1252.554600

APAC Headquarters Singapore

+65.6826.7000

Figure 3

The ability to make changes on the fly is applicable for bi-directional (incoming and outgoing) content and is not limited to removing data. Advanced and persistent threats can also be removed from their common infection vectors with the active content removal feature.

Blue Coat Technology Overview

The Blue Coat ProxySG is the worldwide leader web security platform. Its modular architecture allows achieving great scalability and a suited solution in many different environments.

Its unique combination of bandwidth optimization and layered and extensible security permits it to be complemented with specialized companies to achieve the best available security platform.

About Blue Coat

Blue Coat empowers enterprises to safely and securely choose the best applications, services, devices, data sources, and content the world has to offer, so they can create, communicate, collaborate, innovate, execute, compete and win in their markets. Blue Coat has a long history of protecting organizations, their data and their employees and is the trusted brand to 15,000 customers worldwide, including 86 percent of the FORTUNE Global 500. With a robust portfolio of intellectual property anchored by more than 200 patents and patents pending, the company continues to drive innovations that assure business continuity, agility and governance.

About Clearswift

Clearswift has more than 20 years of secure content expertise. It developed the first deep content inspection engine in 1995 that has lead the company to have an install base in more than 70 countries.

The evolution and focus to identify and protect critical information has recently provided another milestone after delivering the first industry available adaptive redaction engine with extensive and versatile options.