Soliton Systems Europe N.V.

The NetAttest LAP network access control solutions act as a detector and blocker preventing unauthorized devices from using network resources. The NetAttest LAP series continuously scans all devices in the network by monitoring their ARP- and DHCP-requests and immediately notifies the IT administrator of an unknown device trying to connect to the network.

Features and benefits
The NetAttest LAP Series supports a number of key features, including:

• Continuous scanning of devices: the NetAttest LAP series continuously scans all devices in the network by monitoring their ARP- and DHCP-requests.
• Features easy to set up operations: The NetAttest LAP series does not require any change to the network infrastructure and utilizes a simple 3-step configuration.
• Learning mode: automatically detects all existing network devices, such as PCs, tablets, smartphones and IoT devices, and registers them to the whitelist. The whitelist supports manual modification and offers the possibility to export and import the whitelist from third party applications.
• Jamming mode: Set the NetAttest LAP series in jamming mode manually or automatically after a specified period. In jamming mode, the NetAttest LAP series blocks all unregistered devices from using the network resources. It isolates the unknown device by redirecting all network traffic originated from the unknown device to the NetAttest LAP. At the same time, the network traffic directed to the unknown device is redirected preventing it to communicate with any network resource. The redirected traffic can be ignored or forwarded to a configurable landing page for further inspection.
• Automatic notification: when a new device connects to the network, the IT administrator immediately receives an email notification and can allow the unknown device to connect to the network.
• Self-registration: Users of unregistered devices can be allowed to submit a request form to get access to the network. The request form is forwarded to the IT administrator who can add the device to the white list.

Options
The NetAttest LAP can be integrated with the NetAttest LAP Manager which provides a central list of network events and advanced search- and filtering. The NetAttest LAP Manager can manage 1,000 NetAttest LAP’s and allows to define management groups enabling settings to be applied to multiple NetAttest LAP units simultaneously. It also includes a central repository for firmware allowing any firmware updates to be pushed to individual NetAttest LAP units.

With the NetAttest EPS series network administrators can easily implement network access control. Based on the IEEE 802.1X standard the NetAttest EPS series is an all-in-one port-based network access control solution that acts as an authentication and authorization server. It deploys certificates to authenticate users and devices, and to authorize users access to their permitted network resources. The NetAttest EPS series protect the company’s network and its elements from unauthorized access and breaches that may lead to the loss of data.

Soliton SecureBrowser is a remote access solution that establishes connections between a remote device and web servers inside an organisations' network. A secure gateway is used to separate the remote device from the network, secure the connection and provide all necessary connectivity. The internal web servers do not have to be Internet-facing, while at the same time offering full functionality. On the client-side, users use a dedicated SecureBrowser that is only used to connect to the internal web servers. Users get access based on permission rules or Active Directory group membership and do not need to remember any URL's.

The SecureBrowser contains a document reader allowing documents to be opened on the client without the risk of data leakage. The SecureBrowser will delete all browsing data after the user terminates the session. While securely working with company data, the user can still use another browser on the client to connect to Internet-resources. If required, SecureBrowser can provide strong user and device authentication and even connect a used identity to a device.  SecureBrowser is available for Windows, Mac, Android and iOS

SecureBrowser supports a number of key features, including:

• Internet access with sandboxed browsing: when users shut down the browser, all browser data is deleted. Automatically erasing of cache is also possible after a pre-set period.
• No need for VPN: the SecureBrowser creates one access route to the internal applications and uses internal DNS servers. Users can still use their personal browser for private reasons.
• Usage log: the secure gateway logs all access attempts including details about which user, when and what resources are accessed by that user. It can integrate the logging with existing logging and monitoring systems.
• Central management console: provides IT full control on settings, users and usage. IT administrators can control the access to other applications, prevent copy/paste/download of files or allow the download of files in a dedicated secure environment.
• Built-in document viewer: on Windows, iOS and Android devices, Microsoft Office-documents, PDF files, images and a selection of other files are displayed in a secure area and automatically deleted after shutting down the browser.
• Comfortable browsing: including tab browsing for using multiple web pages, searching on the address bar, corporate common/ personal bookmark, copy/paste only possible inside the Secure Browser, full screen and gesture control (iOS/Android）
• Complementary to Mobile Device Management (MDM): companies using MDM solutions can push the SecureBrowser as the default mobile browser on devices for an extra layer of security

Options

SecureFile enables the secure access, download and upload of files from a PC, mobile device or tablet to the internal file server via the secure browser. It does this by creating a web-based view on internal file repositories, like a Windows-server. SecureFile also enables a private file repository for each user. Integrating SecureFile does not require any changes to the internal servers, the access rights of the target server will be effective.

Soliton SecureContainer - DME is a remote access solution enabling employees to securely access corporate data using their mobile devices. Corporate e-mail, calendar, to-do's and other resources are synchronized with the collaboration server. Documents can be downloaded from the company fileservers, temporarily stored, viewed and edited, and uploaded. SecureContainer - DME also enables direct access to company web servers.

All corporate data leaving the organisation is stored inside a secure container on the mobile device. The data inside the container is protected using 128-bits AES-encryption and is accessible via the app. The data can only be accessed by users that can authenticate against the container, even when offline. Administrators are in full control of the secure container and the authentication requirements. Users remain in full control over their (private) device using the local clients and apps for personal use.

The secure gateway separates the remote device from the network, secures the connection and provides all necessary connectivity. One or more connectors make the connection with the internal collaboration servers or Office 365 in the cloud.

SecureContainer - DME is available for iOS and Android

SecureContainer DME Key Features

• Complete separation of business and personal data: all corporate data is securely stored inside the container on the user’s device, all personal data is stored on the device itself. Administrators control the interaction between the two types of data.
• Data leakage prevention: The container is encrypted with 128-bit AES-encryption; the corporate data cannot leak to the user’s device or the cloud.
• Remote wipe: Administrators can remotely wipe the secure container. This operation does not affect the users' personal data on the mobile device.
• No need to manage the device: Administrators control the secure container and therefore need not to have full management control over the device (no mobile device management).
• Single Sign On (SSO): Authentication methods include username and password, swipe gesture, TouchID or FaceID.
• No use of a Network Operations Centre (NOC): SecureContainer – DME is an on-premises solution enabling organisations to be in full control. No third-party components are required. All encryption keys are generated within the solution.
• No need for a VPN: SecureContainer – DME creates one access route to the internal applications and uses internal DNS servers.
• Central management console: Offers IT administrators the possibility of  enforcing policies, set user access roles, distribute and manage HTML5 apps, and application blocking.
• Basic MDM functionalities embedded: For additional security basic MDM functionalities such as enforcing password controls, remote blocking and detection of rooted or jailbroken devices is included.
• No dependency on Microsoft ActiveSync: ActiveSync to synchronize data to and from the remote mobile devices is not required.
• Fully functional workplace in one app: contains PIM data (e-mail, calendar, to-do's) document transfer, secure local storage, editing and viewing capabilities and remote access to internal web-based systems.
• Viewer/Editor: Users can view and edit attachments sent in e-mails or documents stored in the secure container, on- and offline.

AppBox: The optional AppBox is an HTML5 and JavaScript enabled browser providing direct access to internal web-resources. The AppBox enables IT administrators to control the communication between the secure container on the mobile device and the internal servers.