Kaspersky Security for Internet Gateway

Kaspersky Security for Internet Gateway provides secure Internet access for all employees in the organization, automatically removing malicious and potentially hostile programs from incoming HTTP/FTP traffic.

• Reliable protection from malicious and potentially hostile programs
• Real-time scanning of Internet traffic (via HTTP/FTP protocols)
• Filtration of Internet traffic based on a trusted server list, by object type and user group
• Isolation of infected and suspicious objects
• Convenient administration system
• System for reporting on component status
• Scalability
• Automatic updating of databases

Product Components

• Kaspersky Anti-Virus for Check Point FireWall-1
  Provides high-quality antivirus protection for all HTTP, FTP and SMTP traffic that passes through Check Point Firewall-1. The solution detects malicious programs, spyware, adware and joke programs, etc.
• Kaspersky Anti-Virus for Microsoft ISA Server
  Provides comprehensive scanning of data entering the local area network from the Internet via HTTP and FTP protocols. The application supports all popular versions of Microsoft ISA Server.
• Kaspersky Anti-Virus for Proxy Server
  Protects all HTTP and FTP Internet traffic that passes though the proxy server. The application provides security for users when working online and deletes malicious programs and worms that spread via instant messaging programs.
• Kaspersky Administration Kit
  Dynamic and flexible tool for centralized management of Kaspersky Lab applications on a corporate network. Kaspersky Administration Kit was expressly designed to meet the needs of networks of any size or complexity. This tool enables central administration of dynamic networks that number tens of thousands of nodes, extending to remote access and laptop users.

Kaspersky Security for Internet Gateway - Features

Kaspersky Security for Internet Gateway provides secure Internet access for all employees in the organization, automatically removing malicious and potentially hostile programs from incoming HTTP/FTP traffic.

• Reliable protection from malicious and potentially hostile programs
• Real-time scanning of Internet traffic (via HTTP/FTP protocols)
• Filtration of Internet traffic based on a trusted server list, by object type and user group
• Isolation of infected and suspicious objects
• Convenient administration system
• System for reporting on component status
• Scalability
• Automatic updating of databases

Product Components

Kaspersky Anti-Virus for Check Point FireWall-1 Kaspersky Anti-Virus for Microsoft ISA Server Kaspersky Anti-Virus for Proxy Server Kaspersky Administration Kit

Kaspersky Anti-Virus for Check Point FireWall-1

Kaspersky Anti-Virus for Check Point Firewall-1 provides high-quality antivirus protection for all HTTP, FTP and SMTP traffic that passes through Check Point Firewall-1. The solution detects malicious programs, spyware, adware and joke programs, etc.

Functions

Antivirus protection

Antivirus scanning of incoming and outgoing traffic. The application scans incoming and outgoing traffic for viruses, processing CVP requests from the firewall. Objects scanned include web traffic, email bodies and attachments, including compressed and archived files. The program detects not only infected objects, but also objects that can be classed as suspicious, protected or damaged.

Protection from potentially hostile programs. Administrators can choose to use either a standard or extended set of antivirus databases. This enables the program to detect not only malicious programs, but also potentially hostile software, spyware, joke programs, etc.

Excluding file types for faster scanning. It is possible to exclude archive files from scanning altogether, or to configure the program to scan only archives below a certain nesting level. The program can be configured to scan only certain types of files (file type is defined by the internal structure), which means that only objects prone to infection are scanned.

Limiting time spent on scanning each object. The administrator can set a maximum time for scanning each object to minimize any disruption to the user.

On-the-fly scanning. To increase the application’s performance, objects are scanned in RAM without saving them on the hard drive.

Intelligent algorithms. During scanning, safe objects are forwarded to the end user using intelligent algorithms that speed up the application’s operation without sacrificing detection quality.

Processing options for infected objects. Infected objects can either be deleted or treated. It is also possible to disregard the scan result — that is, to send the object to the end user without processing.

Backup copies. Before infected objects are processed (treated or deleted), it is possible to create backup copies of them. The administrator can configure backup copying for each data transfer protocol separately.

Convenient administration. The administrative interface is based on Microsoft Management Console 1.2, which is a familiar tool for most system administrators.

Scalability. The system administrator can choose to run multiple copies of the antivirus engine and multiple CVP servers (which can operate on different physical servers).

Automatic updates to antivirus databases. Updates to antivirus databases can be downloaded to workstations directly from Kaspersky Lab servers or from a folder on the local network. If updates are damaged or incomplete, it is possible to roll back antivirus databases to a previous intact version.

Sophisticated notification system. The product can send notifications to the system administrator about any critical events in the application’s operation, either using the standard tools in Check Point Firewall-1® or via email.

Improved reporting system. Flexible settings for configuring statistics and reports allow the system administrator to choose the desired detail for data collection and reports.

Free technical support. Registered users have access to Kaspersky Lab’s free technical support service by telephone or email. Technical specialists are available round-the-clock to answer questions related to the installation, configuration and use of the product in English, French, German and Russian.

Kaspersky Anti-Virus for Microsoft ISA Server

Kaspersky Anti-Virus for Microsoft ISA Server provides comprehensive scanning of data entering the local area network from the Internet via HTTP and FTP protocols.

The application supports all popular versions of Microsoft ISA Server:

• Microsoft ISA Server 2006 Standard Edition
• Microsoft ISA Server 2006 Enterprise Edition
• Microsoft ISA Server 2004 Standard Edition
• Microsoft ISA Server 2004 Enterprise Edition
• Microsoft ISA Server 2000 Standard Edition
• Microsoft ISA Server 2000 Enterprise Edition

Features

Comprehensive antivirus protection

• Real-time antivirus scanning. The program scans for and removes all types of malicious programs in data traffic transferred via the Microsoft ISA Server. Objects scanned include archived and compressed files in practically any formats.
• Detection of potentially hostile software. The application provides protection not only from viruses, but from potentially hostile software as well, including advertising programs, software that collects information on user computers, utilities for remotely monitoring and controlling victim computers and other utilities used by cybercriminals. Such software can be detected by scanning using the extended antivirus databases.
• Advanced technologies. Kaspersky Anti-Virus for Microsoft ISA Server uses the latest technologies to protect users from malicious programs. As comparative tests have shown, the Kaspersky® Anti-Virus Engine on which the solution is based provides detection rates that are among the world’s highest.
• Protection of server arrays (Only available with Microsoft ISA Server Enterprise Edition ). Kaspersky Anti-Virus for Microsoft Server is an optimal solution for reliable protection of ISA servers that operate as array members. Management of protection settings and updating of antivirus databases is performed centrally for all servers in the array.

• Launching several copies of the antivirus engine. Several copies of the antivirus engine can be run simultaneously on multi-processor servers (by default, four copies of the antivirus engine run at the same time). This enables the application to scan large volumes of data without reducing the ISA server’s performance.
• Selection of objects to be scanned and trusted servers. To reduce server load, the administrator can exclude object types that are not potentially dangerous from scanning. The application can also be configured to not scan traffic transferred from servers included on the trusted server list.
• Configuration of group rules. The administrator can create user groups and configure scanning rules separately for each group, depending on the security policy in place in the organization.
• Optimization for Intel Xeon ( Only available with Microsoft ISA Server 2004 Standard/Enterprise Edition). Kaspersky Anti-Virus for Microsoft ISA Server Enterprise Edition is optimized for multi-processor servers based on the Intel Xeon technology. The application’s scalability and high performance make it an optimal choice in high load environments.

• Centralized administration. The application can be administered either locally or remotely. The administrator can configure protection parameters for all servers in the array (Microsoft ISA Server Enterprise Edition only), define security policies for each user group, view reports on the application’s operation and update antivirus databases.
• Notification and reporting system. Kaspersky Anti-Virus for Microsoft ISA Server uses the Windows performance counters as a monitoring tool. All important messages related to the operation of Kaspersky Anti-Virus are recorded in the Windows application log.
• Automatic updates. The antivirus database and program modules can be updated centrally. Depending on the application’s settings, the updating process is initiated automatically or on demand, over the Internet from dedicated Kaspersky Lab servers or from local update servers specified by the administrator. Kaspersky Lab releases updates each hour.

Kaspersky Anti-Virus for Proxy Server

Kaspersky Anti-Virus for Proxy Server protects all HTTP and FTP Internet traffic that passes though the proxy server.

The application provides security for users when working online and deletes malicious programs and worms that spread via instant messaging programs.

Functions

Protection from viruses, Trojans and spyware

Real-time scanning of Internet traffic. The program detects and deletes all types of viruses, worms, Trojans and other malicious programs in traffic that passes through most types of proxy servers.

Choice of filtration parameters. The program includes a wide choice of filtration parameters (IP and URL addresses, MIME types and file size), which can be used to create individual scanning rules for different user groups.

Scanning of archived files. Kaspersky Anti-Virus provides the highest quality detection and treatment of viruses in any type of file or attachment. The program supports more than 70 formats for archivers (over 420 versions) and more than 260 types of compressed file formats (over 1,330 versions).

Detection of potentially harmful programs. Using the extended protection option, the application can detect and delete not only known malicious programs, but also potentially harmful programs (such as spyware).

Remote administration. The application can be administered remotely via the web interface or via a single configuration file.

Group security policies. The administrator can set individual traffic filtration rules for each user group, which defines permission rules in line with the corporate security policy and employee requirements.

User notifications. The program automatically blocks any infected objects and sends the user a notification in the form of an HTML page. The system administrator can configure the content, format and language of notifications.

Reports and statistics. The application can compile statistical reports to help administrators track virus activity and monitor the application’s performance.

Configurable update modes. Updates to antivirus databases and program modules are available on demand, automatically or on schedule. They can be downloaded directly from Kaspersky Lab servers via the Internet or from a local corporate server.

High reliability. Protection from memory leaks, hardware conflicts, input/output errors and critical system conflicts ensures fast and stable application performance.

Kaspersky Administration Kit

Kaspersky Administration Kit is a dynamic and flexible tool for centralized management of Kaspersky Lab applications on a corporate network.

Kaspersky Administration Kit was expressly designed to meet the needs of networks of any size or complexity. This tool enables central administration of dynamic networks that number tens of thousands of nodes, extending to remote access and laptop users.

Functions

Product philosophy

Versatility and scalability. Kaspersky Administration Kit allows for the effective management of antivirus protection on networks of any complexity and configuration. The tool allows communication between administrative servers and clients on networks with dedicated lines, VPN, firewalls and proxy servers.

Single-point administration. Deploying antivirus protection, setting parameters for groups and individuals, updating antivirus databases and program modules, monitoring system status and responding effectively to critical situations – these as well as other administrative tasks can all be carried out from the administrator’s workstation.

Continuous control. Data on administrative servers and client computers (including laptops) is regularly synchronized to ensure compliance with the company’s security policy and server settings. This also ensures that administrators receive up-to-the-minute information on network incidents, even when they are not in the office (via SMS, for example).

Minimal disruption. Administration of antivirus protection should be barely perceptible to the end user. With Kaspersky Administration Kit, administrators can perform all tasks related to deploying and maintaining the company’s antivirus protection remotely, without having to disrupt end users’ work.

Tightened security. A number of additional safeguards for the administrative network help to harden network security: configuration of administrator role and task definitions, auditing of administrative activities and data exchange via SSL. Moreover, by operating the antivirus program in non-interactive mode, administrators can ensure that users do not make local changes to application settings that could put the network at risk.

Simplified administration. The system is administered via the Microsoft Management Console (MMC), which is a familiar tool for network administrators. A choice of wizards is available to simplify integration and setup of the solution. There is also the option of making backup copies of the database and all application settings, which saves the administrator time when re-installing the program. Moreover, color-coded graphic reports make for easy reading.

Remote installation. There is a choice of methods for installing antivirus solutions. Computers can be added to the administration group either manually or automatically, using the physical network structure, Active Directory service or IP address ranges.

Centralized administration of applications. Configuring parameters for applications across all nodes on the managed network (including laptops) and updating antivirus databases and program modules can be carried out centrally, from the administrator’s workstation.

Monitoring antivirus protection. Administrators can plan how the program will respond to specific events, for instance by sending notifications via email. Copies of infected files and suspicious objects are saved in backup folders, which are accessible to administrators via a single console.

Security policies for laptops. Administrators can create a special security policy for laptop users, which will activate as soon as the laptop disconnects from the corporate network (for example, when an employee is away on business or vacation).

Support for Cisco Network Admission Control (NAC). If the security settings of a mobile device (e.g., a laptop or PDA) do not meet the requirements of the security policy established on the local network, Cisco NAC can deny network access to the device, place it in quarantine or grant it limited access to network resources.

Product training. Product training is available from Kaspersky Lab local offices. Courses train system administrators to install and maintain antivirus protection based on Kaspersky Lab products.

Free technical support. Kaspersky Lab customers can receive free technical support in English, French, German or Russian via telephone or email. If necessary, the company guarantees to provide an exclusive treatment module or security confirmation within 24 hours.

Kaspersky Security for Internet Gateway - System Requirements

System Requirements

Kaspersky Anti-Virus for Check Point FireWall-1 Kaspersky Anti-Virus for Microsoft ISA Server Kaspersky Anti-Virus for Proxy Server Kaspersky Administration Kit

Kaspersky Anti-Virus for Check Point FireWall-1

Kaspersky Anti-Virus for Microsoft ISA Server

Kaspersky Anti-Virus for Proxy Server

Kaspersky Administration Kit