The Portcullis Systems ISA Server Gateway delivers all the capabilities of Microsoft Internet Security and Acceleration (ISA) Server 2006 as an easy to install, easy to manage appliance. Featuring top-quality, server-class hardware, the Portcullis Systems ISA Server gateway provides an advanced, application-layer firewall, VPN, web proxy and caching solution with comprehensive appliance management utilities. This maximizes the defense-in-depth philosophy for core Microsoft® infrastructure applications like Exchange, SharePoint and IIS. Based on a full-featured version of Microsoft Internet and Acceleration (ISA) Server 2006, the ISA Gateway combines ease of implementation and maintenance with prescriptive security and exceptional high performance.

The Portcullis Systems ISA Server Gateway is a full-featured edge security gateway that helps protect networks from Internet-based threats while providing users fast and secure remote access to applications and data. Loaded with standard features, ISA 2006 includes multi-networking support, intelligent application-layer filtering capabilities, comprehensive and extensible authentication mechanisms, and exceptional user interface and management features, including XML-based configuration import and export.

The ISA Gateway is of particular value to IT managers, network administrators, and information security professionals who are concerned about the security, performance, manageability, and cost of network operations.

Protect Your Network From External and Internal Internet-Based Threats

Businesses need to eliminate the damaging effects of malware and attackers through a comprehensive set of tools for scanning and blocking harmful content, files, and websites. ISA Server 2006 can help organizations protect their environments from internally and externally originating Internet-based threats. With a hybrid proxy-firewall architecture, deep content inspection, granular policies, and comprehensive alerting and monitoring capabilities, ISA Server 2006 makes it easier to manage and protect your network.

Securely Publishing Your Content for Remote Access

Businesses need to provide employees and partners with secure and appropriate remote access to applications, documents, and data from any PC or device. ISA Server 2006 enables organizations to make their Exchange, SharePoint, and other Web application servers accessible in a more secure way to remote users outside the corporate network. By pre-authenticating users before they gain access to any published servers, inspecting even encrypted traffic at the application layer in a stateful manner, and providing automated publishing tools, ISA Server 2006 makes it easier to provide security for corporate applications accessed over the Internet.

Connecting and Securing Your Branch Offices

Businesses need to connect remote-site branch offices to their corporate headquarters, provide security-enhanced Internet access from branch offices, and utilize limited bandwidth more efficiently. Organizations can use ISA Server 2006 to connect to and secure their branch offices, while efficiently utilizing network bandwidth. By providing HTTP compression, caching of content (including software updates), and site-to-site virtual private network (VPN) capabilities integrated with application-layer filtering, ISA Server 2006 makes it easier to securely expand corporate networks.

■ Multi-layer firewall – Provides three types of firewall functionality: packet filtering (also called circuit-layer), stateful filtering, and application layer filtering.

■ Securely publish content for remote access – ISA Server enables organizations to make their Exchange, SharePoint, and other Web application servers accessible in a more secure way to remote users outside the corporate network by pre-authenticating users and inspecting even encrypted traffic.

■ Securely connect branch offices – The gateway facilitates cost-effective site-to-site VPN connectivity integrated with application-layer filtering and saves valuable WAN bandwidth by compressing and caching data.

■ Block access to all executable content – HTTP policy enables you to block all connection attempts to the Microsoft Windows operating system executable content, regardless of the file extension used on the resource.

■ HTTP filtering on a per-rule basis – HTTP policy allows the firewall to perform deep HTTP stateful inspection (application layer filtering). The extent of the inspection is configured on a per-rule basis. With this capability, you can configure custom constraints for HTTP inbound and outbound access.

■ Web caching – enables accelerated access to frequently requested content and reduces bandwidth utilization.

■ Real-time monitoring of log entries – View firewall, Web Proxy, and SMTP Message Screener logs in real time. ISA Server Management snap-in displays the log entries as they are recorded in the firewall’s log file.

■ Enforce Microsoft Exchange RPC connections from full Microsoft Outlook messaging and collaboration MAPI clients – Publishing rules give remote users connection to Exchange Server using the fully functional Outlook MAPI client over the Internet. The Outlook client must be configured to use secure RPC so that the connection is encrypted. RPC policy allows you to block all non-encrypted Outlook MAPI client connections.

Portcullis Systems Appliance Management (PSAM) provides advanced technology to keep your investment operating at maximum efficiency

Portcullis Systems Appliance Management (PSAM) performs these key functions:
1. Hardware and Software Alerting – PSAM notifies your administrators as well as Portcullis Systems Support when thresholds for critical operating parameters are exceeded. Alerts regarding items such as operating temperatures, hard disk performance, hard disk remaining capacity, are sent via Syslog, SNMP and email. Alerts are also generated on hardware failures and when services stop or the
appliance experiences resource issues with memory or disk.

2. Patch Management – Threats continue to evolve, as well as the functionality and features of software to protect the security of your network. To provide the fastest possible update service, Portcullis Systems appliances implement a full patch management system that works with all installed Microsoft and non-Microsoft products. Each platform routinely checks if there are updates not yet applied and displays the results in patch reports and executive summaries.

3. Reporting – PSAM provides a robust report set that helps you assess the status of your appliance:

■ Patch Management Report keeps track of all suggested updates and shows which have and have not yet been applied to your device.

■ Network Status Report shows the network usage profile for all Portcullis Systems appliances within your environment.

■ Machine Change Report tracks all software versions and identifies any software that has been modified, often an audit requirement.

■ Executive Summary Report shows a combination of performance, alerts triggered, patch status, disk space usage and overall network health for your appliances. Reports provide both detail and summary analysis of appliance health and performance, including real-time and historical resource utilization.

4. Virtual Engineer, Remote Support Access – Our virtual engineer capability enables us to dispatch technicians to your device without ever leaving our offices! With our advanced technologies, our support engineers can troubleshoot your appliances in real-time to minimize the time to resolve problems. PSAM remote support access is an important tool that helps us fulfill our goal of providing Portcullis
Systems users with the best support available.

5. Backup and Restore – Backup capabilities as well as robust restore capabilities are key to any appliance deployment. PSAM backups can be scheduled to occur automatically at your convenience or on demand. Periodically saving backups to a network share ensures that you can be up and running promptly if there is ever an event that requires a restore of your machine image. Full appliance backups
and differential backups can be scheduled independently of our other configuration backup options and run without impact to your daily operations!

Appliance Management Reports keep you informed

Portcullis Systems Appliance Management (PSAM) generates summary reports that display and track critical parameters to simplify operation.

World-class 24 x 7 x 365 support with onsite support options worldwide!

Each Portcullis Systems solution includes always accessible helpdesk assistance plus support options that can provide onsite hardware support in as little as four hours should you experience a hardware issue. Portcullis Systems technical support is staffed by seasoned professionals with years of experience with our products and related devices they interact with in our customers’ networks. We are committed to provide you with exceptional support and use email, web and telephone to provide you with the most effective method for prompt problem resolution. We make every attempt to answer calls live. When that is not possible, we guarantee a callback within one hour. We understand that our security products are critical infrastructure and we always attempt to resolve your issues as expediently as possible.

Strong security built on enterprise-class hardware platforms

Reliability is an essential requirement for security appliances, which is why the Portcullis Systems appliances are built in ISO 9001:2000-certified facilities using only enterprise-class components. Every element of our platform is designed for continuous use in server room environments to assure reliability that surpasses platforms built with light-duty components rated for desktop devices.

There are tremendous differences in server hardware that significantly affect reliability. For example, hard drive manufacturers measure the Mean Time Before Failure, reported as the familiar MTBF ratings. At first glance, the MTBF for a server-class hard drive may look similar to the MTBF for a desktop-class drive. However, desktop drives are designed to run in a typical office environment five days a week for eight hours a day. Server-class drives are designed to run in a hot server room 24 hours a day, seven days a week, 365 days a year. Since manufacturers base their MTBF numbers on intended usage, the MTBF ratings for desktop and server-class devices are not directly comparable. Desktop-class drives are not intended for 24/7 operation. If you use a desktop disk in an environment that requires 24/7 performance, reliability will suffer greatly. In fact, manufacturers often will not honor warranty claims for drives that are not used as intended. This is why Portcullis Systems uses only true server-class components in our appliances to assure the highest level of reliability.

Portcullis Systems delivers outstanding appliance value

Our ISA appliances bring together the rich security features of ISA, enterprise-class hardware and the robust management tools of PSAM. Delivered with our world-class support capabilities for hardware and software, you have the industry’s strongest value in security appliances. Our solutions deploy quickly to provide years of strong, flexible security at a truly low Total Ownership Cost, making the NS-ISA6000s the right choice for your organization.