Trend Micro's InterScan Web Security Suite (IWSS) provides gateway-based real-time monitoring and scanning of Web traffic, including both HTTP and FTP transmissions. A complementary toolset for existing SMTP (E-mail) based scanners, IWSS includes anti-virus, anti-spyware, anti-phishing, and (optionally) URL filtering capabilities. The latest version of the product is Windows based (Linux and Solaris versions are available in previous versions), and can be implemented in standalone fashion or in coordination with proxy servers, WCCP-enabled routers, or ICAP compatible caching servers (Trend Micro specifically lists Cisco, BlueCoat, and Network Appliance as compatible). Management is via a Web-based console, or through the vendor's Trend Micro Control Manager. Optional Directory Server integration is provided for AD (2000/2003), Linux OpenLDAP (2.2.16), or Sun Java System Directory Server 5.2.

The four key offerings in IWSS include anti-virus, anti-spyware, anti-phishing, and optional URL filtering.

- Anti-virus capabilities are based on the vendor's existing anti-virus scanning technologies, fueled by 24x7 updates provided by the TrendLabs core of engineers.

- Anti-spyware tools scan for and block/quarantine known, malicious spyware, while also allowing the administrator to block specifically unwanted spyware. Additional anti-spyware related features include integration with the optional Damage Cleanup Services, which allows the software to initiate a cleanup of impacted clients to remove resident spyware; the ability to block outbound "phone home" communications at the gateway; and an optional module to detect malicious code in the form of ActiveX and Java applets in Web pages.

- For anti-phishing, the software scanners watch outbound Web site requests, blocking access to "known phishing-related Web sites."

- Available as a separate option, the URL filtering module allows administrators to restrict access to Web sites by category, group, or user; with URL update lists also provided by the vendor. Access control can also be scheduled by time of day, day of week, and bandwidth quotas.

InterScan Web Security Suite is available in software flavors (described above), or as the InterScan Web Security Appliance. The appliance itself is offered in two versions--Standard and Advanced--with the Advanced version adding the URL filtering and Applet/ActiveX scanning technologies. The appliance boasts a maximum throughput of 200 Mb/sec and supports up to 3,000 users when deployed as a proxy or transparent bridge (more users are supported when the appliance is used in conjunction with a 3rd party ICAP server). The appliance boasts GigE copper ports (two unused) and dual 40 GB (RAID 1 mirrored) hard drives. Like the software version, a standalone appliance can be managed via the included Web-based console; with the vendor recommending the Trend Micro Control Manager for the management of multiple appliances.

The newest version of the appliance additionally features the vendor's Web reputation checking technology, which provides zero-hour browsing protection by rating the safety of a Web page based on both its behavior and content.

InterScan Web Security Suite and the InterScan Web Security Appliance is available now. The new appliance release is priced at $22,950 for up to 1000 users.

Contact Trend Micro for further details.