Kaspersky Security for Internet Gateway
Secure Internet access for your employees

The World Wide Web is home to all kinds of malicious agents including regular and bodiless malware, ransomware and miners

Phishing websites, mimicking legitimate resources, are intent on stealing peoples’ and businesses’ credentials and other sensitive information

Uncontrolled access to internet resources brings with it  increased risks of infection and data leaks

Web-based scenarios are extensively utilized by sophisticated attackers against their targets

Ungoverned data flow between corporate endpoints and the World Wide Web brings with it compliance-related considerations.

Responding to detected targeted attacks in time to prevent damage can be problematic without proper automation

Multi-layered malware protection

Industry-proven multi-layered security precisely and proactively detects, analyzes and blocks malware threats including spyware, financial Trojans, ransomware, miners and wipers.

Advanced anti-phishing

Anti-phishing detection models provide cloud-assisted protection from both known and unknown/zero hour online phishing through the neural networkbased analysis of over 1,000 criteria – including pictures, language checks, specific scripting – combined with globally acquired data about malicious and phishing URLs and IP addresses.

Reputational filtering and malicious address detection

The very latest suspicious and unwanted URLs and IP addresses are filtered out, disrupting the web-based attack scenarios they spearhead, using verdicts created by the Kaspersky Security Network, informed by the ML-based analysis of big data acquired in real time from tens of millions of users, and by the work of our renowned GReAT1 and AMR2 teams.

Web control with categorization

Access to unwanted, inappropriate or dangerous sites can be blocked or restricted based on pre-configured web resource categories and/or your own defined lists and policies can be created to apply different types and levels of restriction to different user groups. This flexible but straightforward approach to website access helps reduce the risk of infection and data leaks, as well as preventing inappropriate internet use during working hours.

Management and visibility

A clear web-based interface enables your administrator to monitor levels of corporate web gateway protection with ease, using tools including:

• Flexible but simple-to-use rules and policy configuration
• Active Directory integration
• Role-based access management
• Systems health diagnostics
• Event export to your SIEM system
• Cluster management
• Built-in proxy server management

Prevention of unwanted file transfers

Some downloadable file types carry an increased risk of infection, while uploading others onto the web can lead to data leaks. Preventing the download and upload of these file types significantly decreases your level of risk.

Simple and ready to use

Setting up a Secure Web Gateway has never been so easy. An all-in-one readyto-use appliance requires only a handful of steps to start securing web traffic.

Flexible deployment options

Kaspersky Security for Internet Gateway can be installed on an existing system or can run in a virtual machine, on-premises or in the cloud. Simplified deployment for smaller businesses, tailored enterprise configurations, and lean TelCo-oriented installations with maxed-out performance are all supported.

Multi-vector protection against web-related threats

• Kaspersky Security for Internet Gateway provides protection against a whole range of web-based attacks scenarios, including malware downloads, drive-by/watering-hole attacks using exploits, phishing websites mimicking legitimate resources and many more. It also reduces the risk of infection and data leaks by limiting access to selected web resources and categories, as well as restricting the transmission of certain file types.

Multi-tenancy for complex infrastructure protection and the provision of managed services

• The multi-tenancy feature enables the management of multiple independent infrastructures, each with its own rule-sets and reporting.
• This makes Kaspersky Security for Internet Gateway ideal for complex environments incorporating multiple branch offices, independent projects/subsidiaries etc. It’s also invaluable for MSP/MSSPs wishing to offer a managed web protection service to customers.

Advanced Threat Protection with Automated Remediation

• Kaspersky Web Traffic Security, the main application inside Kaspersky Internet Gateway Security (also contained in other Kaspersky products) includes 2-way API-based integration with the Kaspersky Anti Targeted Attack (KATA) Platform, enriching threat detection context with web gateway-level events and ensuring an automated response, based on deeper analysis by KATA’s advanced mechanisms. Further attempts at payload transmission can be prevented, and the attackers’ command & control systems disrupted and disabled.