Finjan Software's main product line is the Finjan Secure Web Gateway (SWG), security appliances targeted to gateway implementations and providing for content scanning and filtering for Web traffic (HTTP, HTTPS, FTP, FTP over HTTP, IM).

The Finjan "real-time content inspection" methodology is based on the examination of the content's behavior, as opposed to examination of known data signatures and patterns; operating at the application level and determining what the application's behavior will be when loaded into the browser. The platform is therefore able to watch for combinations of potential actions that may be malicious in nature; passing or blocking the content before it is allowed to operate.

The key functional capabilities available in the base configurations of the Secure Web Gateway appliances include the aforementioned behavioral analysis capabilities; "Vulnerability Anti.dote," which allows the appliance to utilize behavioral rules for newly discovered exploits as they are defined by Finjan researchers; and anti-spyware capabilities including the blocking of both spyware downloads and phone home requests.

Optional capabilities available for all the appliances include signature-based A/V scanning (via the user's choice of Sophos, Kaspersky, or McAfee engines); URL filtering (again, the user's choice of IBM or Websense technology); and an SSL inspection module, which allows for the decryption of SSL traffic so that it can be scanned for vulnerabilities.

Other features include centralized management and reporting of all deployed appliances, and support for "X-Ray mode," which allows admins to test new rules with the results only logged (not actually acted upon) before rolling out the rules for live implementation.

Appliances currently available in the Finjan Secure Web Gateway Line include the NG-5100 appliance, targeted to mid-range deployments; the NG-6100, similar to the NG-5100 but with a beefier hardware footprint (quad core CPUs and RAID protected SAS drives; as opposed to dual core CPUs and a single SATA II drive in the 5100); and the modular NG-8100, an IBM eServer BladeCenter based chassis that accepts Scanner, and Report Server/Policy Server blades (up to a combined total of 14).

New in the latest SWG release is the introduction of a Data Leakage Prevention module; which is included in the core package and leverages dictionaries and lists to detect potentially sensitive data in transit. Data can be recognized by matching the list or by format (SSNs, etc.) using admin-defined detection policies.

The Finjan Secure Web Gateway is available now, with pricing starting at $18,000.

Visit the vendor's Web site for further information.