Triton - three pronged defence
by Norman
Emily Wentz asks for “Any brand new proxy websites for Websense that don’t have the word proxy on them? I need one that doesn’t have the word proxy anywhere on the page. Trying to get through Websense”.
Another young lady who, from her online name aspires to own a Porsche, asks “Does anyone know a new proxy that actually works? I need a new and current proxy that actually works and is unblocked or unused because my school basically blocked everything and I need to get on Facebook ASAP. So please help me out.”
Maybe the boys can help. Miles claims to have a solution. “I’ve been checking more, this only works on websites in the “Uncategorized” category, which is all websites that haven’t been pre-approved. I still need some more people to test this though, as I’ve not verified it yet.”
Smierg may be almost there. “I attend a technical college that uses Websense, and there’s a definite way around it, but I haven’t quite gotten to it yet. I’m trying to find a way to bypass the network’s DNS servers…If you can do this, Websense doesn’t exist. I haven’t tried it yet, but me and a friend have a vendetta against Websense so I should have something going within the next week or two”.
Then comes a cry of despair. “You are all weird…why won’t you stop lying…I tried everything yall said and couldn’t work…your all fakes…If I know who you all really are I’ll sue yall…”
These guys are being frustrated by Websense Web. This is the key offering from Websense (www.websense.com/) that provides real-time analysis and classification of content. It stops threats, web exploits and malware arriving and prevents users accidentally or deliberately visiting vulnerable sites or addresses.
Websense has now added - or is in the process of doing so – two more elements and has launched it as Triton. (www.websense.com/Content/Products.aspx?intcmp=HomePageCampaign_TRITON-021210) The Triton offering will probably be of less interest to schools and colleges who merely want to stop their students mucking about with dodgy sites. But Triton will be of enormous interest to international enterprises as it can be scaled to 100,000 seats and operate world-wide.
Triton does this through both corporate appliance(s) and through the cloud. A client can deploy its licences flexibly, either via an appliance (each appliance can handle up to 8,500 seats) or cloud as appropriate to clients’ needs – mobile workers included. This means achieving synchronicity of security policy across enforcement points in different parts of the world. The ‘handoff’ between appliance and cloud is handled by similar ‘awareness’ technology as used in mobile telephony. Thus if a mobile user enters a site where the corporate appliance is within range, it links with that. As soon as the worker leaves the site, the link is dropped and security is delivered through the cloud by WiFi links the worker may access.
The deliverables of Triton are Websense Web gateway as described, the Websense Data Security Suite for outgoing data loss prevention (DLP) and Websense Email Security. The last of these is claimed to provide a counter to targeted attacks propagated over the Web or through email such as the Aurora attack on Google and others. (http://www.wired.com/threatlevel/2010/01/operation-aurora/)
Triton is managed by means of a console that has all three elements, unifying the three main vectors of system compromise.
Websense sees Triton as a ready made solution for controlling content Facebook’s so-called vanity sites. (http://www.facebook.com/marketing) Created to help (brand) marketers share with users and create movements (i.e. lots of followers) on Facebook, it is vital that they stay ‘on message’. Firms like Coca-Cola, BMW, McDonalds or Toyota don’t want scurrilous material or spurious links appearing.
The Websense solution is via software-as-a-service Defensio. (http://www.websense.com/content/Defensio.aspx) Aimed at bloggers, Facebook users, and social Web site owners it should protect them from comment spam, malware, and other nasties in user-generated content including embedded links. As before, Websense draws on its expertise in real-time analysis of Web 2.0 environment and its threats.
So those students really don’t have much chance. With the technology on an appliance, it is no longer behind a firewall. Everything on the corporate site must go through Websense. Reminder, kids, with real time classification of web pages going on all the time, Websense can examine Twitter, Facebook and similar social sites on the fly.
It is unlikely to be the Triton package though. Triton is not really feasible for less than 250 seats so Websense will not be targeting the SME sector.
26/03/10 03:06:12 pm,