What is Internet Separation and Sanitization?

With conventional detection-based general security measures, it is difficult to completely prevent threats from slipping through, so it is fundamental to strengthen security by introducing multiple products based on the concept of defense in depth. I'm here.

However, there is still a residual risk of threats slipping through, so in industries that require a high level of security, such as public offices, financial industry, and local governments, it is necessary to separate the internal system from the dangerous Internet environment and create an environment where attacks cannot reach the system. has become commonplace. (Reference: Cyber Security Management Guidelines, etc.)

このようなインターネット分離の手法は、社内システムに侵入する前の段階で広く脅威を排除することができ、対応しなければならないインシデントを大幅に低減することが出来ます。そのため、侵入後の対応を前提としたセキュリティに比べ運用負荷が低く、多くの企業で優先的に行うべき効果的なセキュリティ強化策です。

Separation and sanitization by Menlo Security

Menlo Security is a solution that can realize separation and harmlessness in SaaS type. Eliminate web and email threats with our patented Isolation technology.

For example, when accessing the web, the original content on the web is usually read and executed on the client, and finally displayed. However, since malicious content is also read and executed on the client, there is a risk of being infected with malware or ransomware by exploiting vulnerabilities in browsers.

In the case of web access via Menlo Security, web content is read and executed once in a virtual container DVC (Disposable Virtual Container™) on the cloud platform. The virtual container DVC is isolated from the system and running malicious content cannot affect the system. Menlo Security creates display results (rendering information) after loading and executing content. The display result (rendering information) is completely harmless as it does not contain any active content.

Harmless rendering results are sent and synchronized from Menlo Security to the client in HTML5 format using patented technology ACR (Adaptive Clientless Rendering™). Since the client always receives harmless display results (rendering information), no matter what website you access, the risk of malware infection is completely eliminated, and a safe Internet connection environment can be realized.

Menlo Security Isolation Platform - Overview

Easy operation and management

Menlo Security allows you to configure various settings from the management GUI. For example, it is possible to set access policies for each web category, control downloads/uploads according to file types, and control writing. In addition, antivirus and Box quarantine (optional) can be performed in parallel, and application communication can be visualized and controlled.