Check Point is a leader in Internet Security, offering total security solutions featuring a unified gateway, single endpoint agent and [...]
M86 Secure Web Gateway
Real-time Malware Protection. Advanced Reporting. Remote Coverage.
The M86 Secure Web Gateway (M86 SWG) protects organizations from new and dynamic malware using the first and only real-time code analysis technology. It enables organizations to manage productivity, reduce data loss risks and access Web 2.0 applications safely through detailed policy enforcement and Web controls. Plus, the M86 SWG:
- Provides the most comprehensive malware protection available using M86′s Vital Web Security Suite™ technologies which include: Real-time Code Analysis, Vulnerability Anti.dote, Dynamic Web Repair and Granular Social Media Control
- Extends the same onsite protection to mobile workers with the
M86 Secure Web Service Hybrid option
What’s New
- Integrates with the M86 Security Reporter 3.0 for powerful, flexible reporting
- Includes the M86 Web Filter List with 100+ URL categories for granular Internet Acceptable Use Policy enforcement
- Includes enhanced on-box reporting for added functionality and improved logging and reporting
M86 Secure Web Gateway Features and Benefits
M86 Secure Web Gateway Features and Benefits
Benefits
- Protects from new and dynamic malware by analyzing content in real time
- Eliminates threat exposure by detecting vulnerabilities and protecting them from exploitation before patches are applied
- Extends the same on-premises security to remote users through a hybrid cloud option
- Ensures productivity by repairing infected Web pages without blocking content
- Prevents data loss by allowing social media posts, comments or uploads to be blocked
- Protects from stealth agents by using outbound bot detection
- Ensures regulatory compliance through detailed reporting and extensive archiving
- Protects brand reputation through granular social media control
- Enforces AUPs through flexible policy control settings
- Simplifies administration through centralized management and easy integration
- Ensures fast Web page load times using content acceleration with built-in caching
- Lowers Total Cost of Ownership by minimizing the support and resources required
Features
- Policy settings wizard for easy setup and management of security policies with single-click rules refinement
- Powerful logging and reporting of user transactions as required for regulatory compliance
- Secure content caching for accelerated content delivery
- X-Ray Mode for testing new policy rules on live traffic without disrupting ongoing business operations
- Intelligent update mechanism for automatic and controlled (per scanner) product and OS upgrades, security updates and third-party engine updates
- SNMP support provides “just-in-time” alerts of relevant operational events using SNMP traps and email alerts
- Supports transparent and non-transparent proxy mode as well as bridge mode
- User authentication/identification based on Microsoft Active Directory® or other LDAP servers, without the need for installation of any additional software
- Secure LDAP ensures that authentication credentials are transferred securely from the directory server to the appliance
- Supports RADIUS authentication for administrators
- Robust hardware platform for enterprise-grade throughput performance
- Active/stand-by policy server option
- Scalable multi-appliance solution
- High availability and load balancing
- Multiple upstream proxies can be defined and used based on an assigned upstream proxy policy
- Multi-level/delegated administration enables multiple administration groups to manage and monitor the system with different authorities
- Smooth integration into various network topologies and monitoring systems (supports Cisco WCCPv2, ICAP, Syslog and SNMP v3 standards)
Technologies
Vital Web Security Suite™
The M86 Secure Web Gateway is powered by the Vital Web Secure Suite, a group of complementary technologies that provide the most accurate, comprehensive malware protection available.
Real-time Code Analysis Technology
Preempts Unknown, Dynamic Threats
M86′s Real-time Code Analysis engine detects and blocks obfuscated code and other dynamic cybercrime techniques in real time. It analyzes all incoming and outgoing Web content communicated over HTTP and HTTPS, regardless of origin and without signature matching. As a result, malware is detected and blocked before entering the network — even when hiding in encrypted SSL traffic.
Dynamic Web Repair™
Eliminates Malicious Code from Web Content
In the event a legitimate Website is compromised, Dynamic Web Repair™ removes the malicious code seamlessly — without blocking the Website. After eliminating the offending code, Dynamic Web Repair™ delivers the safe Web content to the user, ensuring continued productivity.
Vulnerability Anti.dote™
Closes the Vulnerability Gap for Known, Zero-hour Attacks
Vulnerability Anti.dote provides powerful, proactive Web security while reducing patch management overhead. Based on M86′s knowledge of new software vulnerabilities, behavioral rules are created to enable Vulnerability Anti.dote scanning engines to identify and block content that tries to exploit one or more weaknesses. New rules are included in M86′s security updates and installed transparently in all M86 SWG deployed appliances. This enables organizations to immunize all systems from vulnerabilities without needing to apply emergency patches.
Granular Social Media Control
Controls Access to Web 2.0 Applications
This feature enables organizations to block posts, comments or uploads to social media sites such as Facebook and Twitter, while allowing employees to use other site functions. This prevents data leakage and helps enforce AUPs.
Antivirus Scanning
Scans for Known Viruses
Serving as a first line of defense, anti-virus scanning blocks known viruses prior to the deep content scanning performed by Real-time Code Analysis. This is available as an optional feature and can be included in the Vital Web Security Suite package.
URL Filtering
Manages Productivity
URL filtering is an ideal way to control employee browsing habits, increase productivity and improve network performance. And with the M86 Web Filter List, customers who use the M86 Secure Web Gateway and M86 Web Filter have access to the industry’s leading URL list with more than 100 categories for granular Acceptable Usage Policy enforcement. The M86 Web Filter List is available as an optional feature and can be included in the Vital Web Security Suite package.
Appliance Models
M86 Secure Web Gateway Appliance Models
M86 Security offers three on-premises deployment options for M86 Secure Web Gateway appliances. Designed for high availability and reliability, they are easy to deploy and integrate into various network components and monitoring systems through the support of Cisco WCCPv2, ICAP, Syslog and SNMP v3.
M86 SWG 3000 for Midsize Organizations

| Hardware Performance Specificatons SWG 3000 | |
| CPU | 1 x Intel Xeon Quad-Core X3430 2.4GHz |
| Hard Disk | 250GB 3.5″ 7200 RPM Simple-Swap |
| Memory | 4GB |
| Rack space (1U) | 430 x 560.1 x 43 mm (WxDxH) 17.3 x 22 x 1.69 inches (WxDxH) |
| Gigabit Ethernet NIC | 4 |
| Caching kit (optional extension to the SWG 3000) | |
| Hard disk | 250GB SATA2 |
M86 SWG 5000 for the Enterprise
| Hardware Performance Specificatons SWG 5000 | |
| CPU | 2 x Intel Xeon Quad-Core E5506 2.13GHz |
| Disk | 2 x 146GB SAS (RAID 1) |
| Memory | 4GB DDR3 |
| Rack space (2U) | 440 x 711 x 43 mm (WxDxH) 17.3 x 28 x 1.69 inches (WxDxH) |
| Gigabit Ethernet NIC | 4 |
| Caching Kit (optional extension to the SWG 5000) | |
| Hard disk | 2 x 73GB SAS |
| RAID controller | 1 x IBM ServeRAID MR10i |
M86 SWG 7000 for Large Organizations
| Hardware Performance Specificatons SWG 7000 (per blade) | |
| CPU | 2 x Intel Xeon Quad-Core E5506 2.13GHz |
| Hard Disk | Up to 2x146GB SAS |
| Memory | 4GB DDR3 |
| Gigabit Ethernet NIC | Up to 4 |
| Caching Kit (optional extension to the SWG 7000 scanner) | |
| Hard disk | 73GB SAS |
| IBM eServer® BladeCenter™ Chassis | |
| Max. number of blades | 14 hot swappable blade servers |
| Rack space (7U) | 44.4 x 71.1 x 30.4 cm (WxDxH) 17.5 x 28 x 12 inches (WxDxH) |
| Redundancy | Hot swappable blowers and power supplies |
| Number of users per deployment | Up to 30,000 per chassis |
Hybrid Cloud
M86 Secure Web Service Hybrid
Part Appliance. Part Cloud. All Secure.
As a deployment option for the M86 Secure Web Gateway (M86 SWG), the M86 Secure Web Service Hybrid (M86 SWS-H) extends the same onsite malware protection to remote office and mobile users. It combines cloud-based and on-premises Web security for consistent security and policy enforcement regardless of a user’s location—all from a single management interface.
The M86 SWS-H detects and blocks malware and other Web-based threats in real time—before they have a chance to infect laptops and branch office desktops.
Features
- Vital Web Security Suite technologies block malware at the gateway, maintain productivity and ensure compliance
- No hardware to install at branch offices
- Consistent Web security for all roaming employees and branch offices
- Full policy control managed by the customer
- Unified reporting from all locations and users
- Full control of logging and reporting data
- Linear scalability with no noticeable latency; no need to add hardware as traffic volumes increase
- Granular Web security policy that adapts to all users
- Seamless authentication of all users, regardless of location
Reporting
M86 Security Reporter
The Best Reporting Goes In Depth
The M86 Security Reporter provides total visibility into Web traffic for organizations using the M86 Secure Web Gateway or M86 Web Filter products. It enforces Internet Acceptable Use Policies (AUPs), manages productivity and ensures regulatory compliance through fast, customizable reporting; extended storage for long-term proof of compliance; and in-depth analysis of all Web traffic. It analyzes Web behavior, trends and risks for refinement of an organization’s AUPs.
Built on a dedicated MySQL database, the M86 Security Reporter provides customizable, at-a-glance dashboards and executive reports as well as extensive forensic, drill-down reports to prove user intent. It also delivers up-to-the-minute graphical snapshots of Web traffic and bandwidth use.
What’s New
* Now integrates with M86 Secure Web Gateway
* Increased archive capacity for up to 12TB of Web activity data
* Central reporting for all M86 Secure Web Gateway, M86 Web Filtering and Reporting and M86 Secure Web Service Hybrid data
* New security reports that analyze threats on the network, helping current M86 Web Filter users identify potentially-infected workstations and high-risk Web activities









Social Us