When you connect your device to the Internet, you expose yourself, your family, your friends and your colleagues to sever threats coming from the Web. Personal Computers, Servers, Smartphones and IOT devices remain vulnerable even if you protect them with basic security solutions such as firewalls and locally installed antivirus. Cyber criminals are watchful to find vulnerable devices to hack and exploit them as a target or as a base for third parties attacks. CacheGuard solutions have been especially developed to remedy those vulnerabilities through a unique product: CacheGuard UTM.
What is a UTM and why do I need it?
A Unified Threat Management (UTM) solution embeds multiple security technologies in a single product. It’s an ideal solution to get online security for organizations with limited resources such as SMBs. If you run an SMB (Small and Medium Business), dealing with dozens of network and security products is certainly not the ideal solution to address the security and service continuity you deserve. What you need is a simple and easy to handle functional solution to remedy your online vulnerabilities. That’s why we developed CacheGuard. CacheGuard solutions are Functional, Highly Integrated and have been especially designed to be easy to handle.
Security and QoS Functions with CacheGuard Solutions
CacheGuard solutions includes all Security and Optimization functionalities that you may need for your online exposure. Those functions, all together in one package, provide you the highest level of integration and ease the tasks of configuring and administering a network appliance. Below you can find an overview of all functions provided by CacheGuard UTM.
Security > Gateway Antivirus
CacheGuard Antivirus inspects the Web traffic at the gateway and eradicates all dangerous contents before they can enter into your networks. You stumbled upon a Web page on the darknet? You received an email with a suspicious link that you accidentally clicked on it? CacheGuard instantly blocks that suspicious contents and logs the access attempt. CacheGuard Antivirus can also be used as a service by external systems such as an MTA (Mail Transfer Agent) to block malware reaching your infrastructures via protocols other than HTTP/HTTPS. Combined with other CacheGuard solutions, CacheGuard Antivirus reinforces your online security. Learn more at Gateway Antivirus
Security > URL Guarding
CacheGuard URL Guarding (Filtering) blocks the access to unwanted URLs. To do so, it uses blacklists, white lists and regular expressions to allow or disallow websites accesses thus increasing the productivity of your users while keeping you safe from malicious websites. The URL Guarding coupled with your LDAP or AD/Kerberos authentication server allows you to define your own sophisticated Web access policies. Combined with other CacheGuard solutions, CacheGuard URL Guarding reinforces your online security.Learn more at URL Guarding
Security > Firewall
CacheGuard Firewall protects PCs, servers or any other connected devices from hostile intrusions from the Internet and/or external networks. CacheGuard Firewall enables stateful packet filtering, Network Address Translation (NAT) and Port Address Translation (PAT) and is fully customizable to fit your needs. It integrates smart rules that block attacks such as DDOS (SynFlood, Smurf, XMas…) and IP spoofing. Combined with other CacheGuard solutions, CacheGuard Firewall reinforces your online security. Learn more at VPN & Firewall
Security > Virtual Private Network
CacheGuard VPN allows you to securely connect remote workers to your infrastructures or build permanent secure tunnels between sites using the IPsec VPN (Virtual Private Network) technology. With the IPsec VPN technology remotely connected machines are authenticated and exchanged data between them remains confidential and unchanged. Combined with other CacheGuard solutions, CacheGuard VPN reinforces your online security. Learn more at VPN & Firewall
Security > Access Authentication
CacheGuard authentication allows you to restrict the Web access to authenticated users only, thus preventing the Web access to non authorized users or intruders. CacheGuard Authentication supporrts LDAP, LDAPS and the Kerberos authentication compatible with Microsoft® AD®. The LDAP/LDAPS authentication can be enabled for internal users as well as for external users of your internal Web applications cloaked/protected by CacheGuard Web Gateway. Combined with other CacheGuard solutions, CacheGuard authentication reinforces your online security.
Security > Bidirectional Web Proxy
CacheGuard Proxy allows you to browse the Web without being directly exposed to the Internet. The Web Proxy is at the core of CacheGuard and can be implemented transparently to users and Web applications. In forwarding mode the Proxy secures and optimizes the Web traffic destined to Web users while in reverse mode it secures and optimizes the Web traffic destined to Web applications. The Web Proxy and the Reverse Proxy can be activated at the same time on the same CacheGuard without the risk of mixing forwarding and reverse Web traffic by isolating each type of traffic in a distinct VLAN. Combined with other CacheGuard solutions, CacheGuard Proxy reinforces your online security. Learn more at Forwarding
Proxy and Reverse
Security > WAF (Web Application Firewall)
CacheGuard WAF protects your Web Application against content attacks. Because cyber-attacks have become increasingly sophisticated, blocking threats at the IP level only with traditional firewalls is not enough to provide an acceptable level of security to Web applications. CacheGuard WAF (Web Application Firewall) protects your Web applications against a range of content oriented attacks such as Protocol Violation, Protocol Anomaly, Session Fixation, SQL injection, XSS (Cross Site Scripting), File injection, Command access, Command injection and LDAP/SSI/PHP injection. CacheGuard UTM includes a WAF that allows you to protect your precious Web applications against content attacks. Combined with other CacheGuard solutions, CacheGuard WAF reinforces your online security. Learn more at WAF
Security & QoS > SSL Mediation/Inspection
The SSL Mediation (or Inspection) enables the decryption of encrypted Web traffic (HTTPS
) at the Gateway in order to cache and/or inspect its content. Therefore, the CacheGuard Antivirus can be fully operational and block all attempts to access malware even in an encrypted format. When the SSL Mediation is activated, CacheGuard re-encrypts decrypted traffic before forwarding it to users. CacheGuard UTM includes an SSL mediator and inspector. Combined with other CacheGuard solutions, CacheGuard SSL Mediation reinforces your online security and optimizes your network traffic. Learn more at SSL Inspection
QoS > SSL Offloading/Inspecting
Once implemented in reverse mode, CacheGuard acts as an SSL Offloader in order to inspect the content of encrypted Web traffic (HTTPS) exchanged with Web applications that it cloaks and protects. Content filtering functions such as the WAF and the Antivirus are then fully operational and can block threats even in an encrypted format. At the same time a bunch of load balanced Web servers cloaked by CacheGuard are offloaded from the redundant task of encrypting/decrypting the Web traffic. Hence, you optimize the usage of your CPU/RAM resources and increase the overall performance of your infrastructures. CacheGuard UTM includes an SSL offloader and inspector. Combined with other CacheGuard solutions, CacheGuard SSL Offloading/Inspecting reinforces your online security.
QoS > Load Balancing
With CacheGuard Load Balancer you can design scalable architectures to provide the right QoS (Quality of Service) at the right time. Implement your first CacheGuard for your current needs and switch to a dual (or more) Web Gateway architecture later if necessary. You can also balance the total Web traffic load among backend Web servers and make sure your users always have access to Web applications even when one or more Web servers are down. CacheGuard UTM includes a Web server load balancer. Combined with other CacheGuard solutions, CacheGuard Load Balancer reinforces your service availability.
QoS > Traffic Shaping
CacheGuard Traffic Shaper allows you to distribute appropriate bandwidth to users, allowing you to give your power users quicker access to the Web. When implemented in front of your Web applications, CacheGuard can shape the Web traffic in order to allocate the right bandwidth to Web applications according to their criticality. Reserving adequate bandwidth for Web applications ensures that Web applications are always available to serve users according to your actual needs. CacheGuard UTM includes a traffic shaper. Combined with other CacheGuard solutions, CacheGuard Traffic Shaper optimizes your network traffic. Learn more at Traffic Shaping
QoS > Caching and Compressing
With CacheGuard you have the possibility to cache the Web content and transmit it in a compressed format, thus saving your bandwidth and in some cases accelerating the Web traffic. Caching and compressing help ensure to deliver the Web content quickly and smoothly to your local users as well as to your remote users. The Caching, Compressing and Traffic Shaping all together allow you to optimize your Web traffic and consequently lower your costs. CacheGuard UTM includes a Web cache and a Web compressor. Combined with other CacheGuard solutions, CacheGuard Caching and Compression optimize your network traffic.
QoS > High Availability
CacheGuard HA (High Availability) Feature provides your users with continuous uninterrupted access to the Web. To do so, 2 or more CacheGuard Web Gateways can be implemented in HA mode in order to provide a SPoF-less (Single Point of Failure) architecture, thus increasing your SLA (Service Level Agreement). The HA mode can be activated in forwarding mode to secure your internal users as well as in reverse mode to secure your Web applications. CacheGuard UTM includes HA technologies.
CacheGuard-OS and CacheGuard UTM Appliance
CacheGuard UTM is distributed as an OS (Operating System) to install on a Hardware or Virtual Machine of your choice, as an OVA (Open Virtual Appliance) file to import into your virtualization system such as VMware or MS Hyper-V or as a Cloud service. Once installed on a machine, CacheGuard-OS turns that machine into a powerful UTM appliance with lots of powerful and easy to configure functions. Implementing CacheGuard UTM in your infrastructure is as simple as choosing a machine, installing CacheGuard-OS on it (or just importing an OVA file) and setting up some basic configurations, all in just a few minutes.
And most importantly, with CacheGuard solutions you are never alone. Our experts can assist you in all phases from choosing the best machine for your needs to setting up sophisticated configurations. Feel free to post your technical questions on our CacheGuard Help and get responses around the clock free of charge. At CacheGuard Technologies Ltd we take a real pleasure to help you to implement CacheGuard UTM and we are committed to delivering high quality support.