Welcome to the Proxy Update, your source of news and information on Proxies and their role in network security.

Tuesday, June 3, 2008

Proxy isn't just for the web anymore

When most adminstrators think about proxies, they automatically assume secure web gateways. A proxy to handle web traffic in and out of the corporate network. Today's proxies handle a lot more than just web traffic. Modern proxies can proxy FTP, P2P (peer to peer), IM (Instant Messaging), and other protocols. They also recognize applications within web pages, and many proxies can even filter or block embedded chat mechanisms in web pages.

While proxies provide mechanisms to control these additional protocols they can also set policy for them by user or group. For example, perhaps the sales organization needs IM to keep in touch while they're on the road, so those users can be allowed to chat online, while the remainder of the organization can be forced to use an internal only chat mechanism (like Jabber), or just have it completely restricted. The support organization may need FTP for transferring files for debugging while it's a risk to allow it for the rest of the organization due to DLP (data leakage protection) reasons.

Today's proxies give you a lot more reason to make sure they are part of your network security toolbox.

No comments: