Implement web protection to secure your network

Web protection

Failing to put controls on employee web access causes multiple risks and cost problems:




    • End-users are allowed to frequent unsafe sites – thus exposing company endpoints to malware via drive-by downloads, and related exploits.
    • No protection against end-users who fall for phishing attacks and click on links to malicious websites.
    • Increased exposure to watering hole attacks.
    • Increased exposure to compromised endpoints succeeding in contacting command and control servers and/or exfiltration of data.



    • End-users doing productive work on the Internet are slowed down by non-work related usage.
    • End-users spending hours on personal social media and online shopping – especially during holiday seasons.



    • Internet related business processes such as backups, synchronization, use of cloud-based services suffer because bandwidth is being eaten up by non-business related content including bandwidth hungry video, streaming music and social media.
    • Telecommunication costs grow in order to buy more bandwidth to address above issue.









To address these risks you need to be able to:

  • Tie Internet traffic to application/service
  • Measure bandwidth by end-user
  • Measure usage time by end-user
  • Accurately categorize web-sites
  • Gain visibility into SSL encrypted traffic
  • Implement network rules and restrictions based on groups and other identity information in Active Directory
  • Understand and analyze traffic at a much deeper level than traditional firewalls
  • Take into account time of day, day of week and even season.


Some of these requirements are pretty sophisticated. For instance many companies can’t simply block access to social media altogether. There may be many employees within the company that interact with customers or publish content via Facebook and Twitter. That’s where proxy server and next generation firewall technologies come in and make it possible to do things like detect and control what users access and do inside of certain sites and applications like Facebook. Maybe you want users to be able to even check personal Facebook accounts but you draw the line at playing games inside Facebook.


Web protection can be implemented via an Unified Thread Management system or via the Managed Workstation solution by 5 Star Technology.