Intelligent and Proactive Content Control: DeepNines' iTrust
DeepNines' iTrust is the industry's first solution that allows administrators to permit and prioritize good Internet traffic, block bad online content and eliminate content filter circumventions through methods such as Web proxies.
- DeepNines iTrust: DeepNines iTrust augments your current content filter by preventing Web proxies and other filter circumventions to ensure that all HTTP traffic passes through your filter. In addition, it allows for the elimination and/or control of content that your filter cannot address such as peer-to-peer traffic, UDP-based traffic, online chat and more.
- DeepNines iTrust CF: DeepNines iTrust CF provides the same functionality as DeepNines iTrust but with integrated content filtering from industry-leader SurfControl. This intelligent content filtering solution includes all of the same functionality as DeepNines iTrust but with the addition of content filtering to provide the most comprehensive protection for your network.
Content has evolved dramatically over the past few years, but most content filters have not. Normal content filters have been rendered ineffective by this paradigm shift in content and the emergence of Web proxies, a tool that makes an indirect connection to the Internet and then searches the Internet for the desired website (such as MySpace.com) on behalf of the user. Web proxies are seen as valid connections by content filters, since the user isn't connecting directly to a restricted website.
Hundreds of Web proxy variations exist, and only the proprietary technology in DeepNines' iTrust can block them all. iTrust ensures that all Internet traffic is effectively and accurately filtered, including non-URL based traffic such as peer-to-peer downloads, online chat, streaming video and more.
Why Many Content/URL Filters are Ineffective:
- They inspect only a fraction of the traffic (Ie. Web-based (HTTP) traffic) and allow individuals to simply bypass the filter by using other ports and protocols
- They reside on the span port and cannot react immediately to unwanted traffic.
- They use TCP-resets to block traffic, which does not work on UDP traffic (ie. peer-to-peer)
- They blocks only known restricted Web sites,
- They have no control over or visibility to unknown restricted Web sites and un-wanted traffic
- They are dependent on daily updates, making them only as good as their last update
- If the seat limit is exceeded then all additional users will not have their traffic filtered
How DeepNines' iTrust Works iTrust only allows only wanted traffic into the network by performing comprehensive inspection on all traffic, not just HTTP or port 80 traffic. iTrust then utilizes a Multi-Method Inspection (MMI) process that combines proprietary behavior and signature detection along with best-in-breed content filtering from SurfControl. This methodology greatly reduces the number of signatures and policies that must be managed, increasing accuracy while reducing the amount of false positives and negatives typically associated with both stand-alone intrusion prevention and content filtering solutions.
DeepNines iTrust
Keep Unwanted Content OutDeepNines iTrust can block:
- Hundreds of web proxy variations
- All filter circumvention techniques
- Millions of URLs with inappropriate content (DeepNines iTrust CF required)
- Peer-to-peer file sharing services for music and video downloads
- Online chat
- Online games and gaming
- Spyware
- Viruses and worms
Intelligent Traffic ManagementiTrust makes your network more efficient by prioritizing good content and critical applications. DeepNines' Intelligent Traffic Management allows the administrator to control and set policy for all traffic and content. DeepNines' Flow Tagging function automatically triggers events based upon set parameters to prevent the consumption of critical resources or to limit individual bandwidth usage.
DeepNines iTrust can prioritize and allow:
- Critical online curriculums or applications
- Certain online chat such as iChat and block others
- Certain peer-to-peer and podcasts and block all others
Key Differentiators
- Only content filter that can prioritize the good traffic to ensure adequate bandwidth for important online content such as educational programs
- Inspects all ports and protocols to prevent circumvention
- Immediately drops or redirects offending traffic instead of relying on TCP resets
- Able to block all Web proxy variations including transparent proxies, anonymous proxies, Tors, circumventors and more
- Bandwidth-based pricing model which ensures that incremental traffic and hosts are being scanned
- Immediate protection against new and emerging threats and content
Key Benefits
- Focuses on individual's behavior as well as known URLs
- Option for integrated URL filtering from industry-leader Surf Control
- Enables granular management of Internet use and blocking of inappropriate content
- Reduces legal liability
- Provides complete network visibility
- Ensures accurate traffic inspection
PerformanceTrust can run on your choice of hardware, or can be purchased as an appliance. iTrust supports speeds of up to 1 GB, with incremental HTTP throughput offerings that will fit your network needs.
- Performs at wire speeds of up to 1 GB with over 100 MB of HTTP traffic
- Inspects every packet and session
- Inspects every port and protocol
Integrated ManagementDeepNines SES is managed by the DeepNines Edge Management Console (EMC). To find out more about the EMC, please click here
Models
Model |
iTrust 910 |
iTrust 9100 |
iTrust 9250 |
iTrust 9500 |
iTrust 91000 |
Max Users |
Unlimited |
Unlimited |
Unlimited |
Unlimited |
Unlimited |
Typical Deployment |
Small school (less than 5,000 students) |
Medium school (less than 25,000 students) |
Large school (less than 75,000 students) |
Very large school |
Very large school |
Form Factor |
1U |
1U |
1U |
2U |
4U |
Processors |
1 CPU |
2 CPU |
2 CPU |
4 CPU |
8 CPU |
Throughput |
10 Mbps |
100 Mbps |
250 Mbps |
500 Mbps |
1000 Mbps |
PATENT INFORMATION
Protected by US Patents 6,930,978 and 7,058,976
