|
 The
key to the success of Safend's innovative endpoint security
solutions is the underlying Digital Membrane™ technology.
With the understanding that every endpoint has a different
set of external interfaces, based on differing standards but
all leveraging the standard IP protocol stack - Safend created
a protocol-level, generic, semi-permeable barrier that can be
"wrapped around" any device.
At the heart of this barrier - dubbed "Digital Membrane"
- is a unique kernel-level protocol inspection engine that analyses
in real time all inbound and outbound communication interfaces
for a given device. The engine examines all seven protocol layers
- from the physical to the application layer.
The Digital Membrane monitors and controls all incoming and
outgoing traffic for each device - blocking or allowing access
or data based on highly-granular security policies. Barrier
permeability is controlled in accordance with organizational
security policy – granularly defined in the Safend Security
Management console.
The result - total policy-based monitoring and control at
all protocol layers – enabling previously unheard-of visibility
and control over devices, applications, and actual data transferred.
Kernel-Layer Approach
The kernel-layer approach ensures that Safend provides the
greatest level of security possible. Safend operates at the
lowest level of the kernel, just above the hardware stack, making
it virtually impossible to bypass policies and connect unauthorized
devices, providing administrator with greater flexibility to
design and implement highly granular security policies.
|
Safend
Technology