The document discusses Secure Web Gateway (SWG) technology which provides effective control of inbound and outbound network traffic. Key features of SWG include blocking access to dangerous websites or malware, classifying and securely filtering social media and web searches, and detecting malware in web pages. The document then focuses on the F5 SWG product and its primary capabilities such as URL/app filtering, malware detection, user identification, and security management/reporting. A comparison chart shows how F5's SWG compares favorably to other vendors in areas like advanced classification, real-time security, and content filtering.

1. Secure Web Gateway (SWG)
보안 웹 프록시

2. • outbound & inbound 의 효과적인 트래픽 제어
• Inbound: 모든 사용자는 APM을 통하여 들어오는 트래픽
에 대한 제어 (Access, VPN, Identity Federation, SSO, etc
.)
• Outbound: 위험한 웹 사이트 또는 악성 코드 감염으로
부터 차단
• 소셜 웹 미디어 사용시 작업에 따른 분류 보안 (Facebook
, Twitter)
• 웹사이트에 대한 검색 및 악성 코드 분류 및 효과적인 차
단
F5 SWG : Secure Web Gateway

3. F5 SWG
주요 기능 위협 성능
URL/App Filtering
Policy based control and monitoring on who can ac
cess what websites at what times with what risks inv
olved
Web Page Based Malware
Detecting malware or malicious components inside
web pages
User Identification
User names, IP addresses, devices used and more c
ontextual information
HTTP/SSL Forward Proxy
Intercepts all outbound HTTP(S) traffic, inspect the
URLs or web applications and enforce policy control
s
Security Management, Reporting & Logging
VPE based policy, Top Security Event Reporting with
drill-down capability to show details
Malicious URLs Inside Search Results
Detect and block URL links that embedded inside a
search engine results, when client browsers failed to
be configured with “safeSearch” mode.
Visiting malicious websites and web based
malware infections
Regulatory compliance on reporting and e
nforcing Internet usage based on policies
Mitigation of sensitive data leakage by un
authorized employees or through infected
web applications
Loss of business productivity because of
unauthorized usage of Internet
Metric Range
Transaction Per Se
TBD
conds (TPS)
L7 Throughput TBD
# of Users 500-20,000 (BIG-IP)
Up to 80,000 (VPR)
Websense
Threat
Intelligence
Enterprise Apps
Remote
Access
3rd party Saa
S
Internet
Secure Web Gateway

4. F5 SWG : 쉬운 정책 수립, 접근 및 통계 가시성

5. WEB Gateway/Filtering 솔루션 비교
F5
Bluecoat
WF
Bluecoat
SWG
Checkpo
int SWG
Palo Alt
o
PaWloFAlt
o
SWG
Cisco W
F
Cisco S
WG
URL
Cat. Engin
e
URL Filtering - Security x x x x x x
URL Filtering – Productivity/Accept
able Use
x x x x x x x X
Advanced Classificat
ion Engine
Real-time Security Classification x
Anti-Malware Engine x x x x x x x
Reputation Analysis x x x x
Real-time Content Classification x (1) (1) (2) (2) (3) (3)
(1) LimitedS Loincki aAln Malyesids iOan (lyFine-grained control) x x x
(2) Limited to small number of applications
(3) Simplistic weighted dictionary of keywords